[Bro] DDOS ( SYN flodding attack)

[Robin Sommer]

On Wed, Mar 31, 2010 at 20:20 +0530, vijay khadse wrote:

> Can we use BRO to detect DDOS ( SYN Flodding attack)  at a router.

Try running Bro with the script synflood.bro. You may need to tweak
a few of the parameters at the beginning of the script.

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org