×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

how to trap the network noise makers

Unanswered Question
Jul 15th, 2002
User Badges:

If someone in the network uses packet generator tools or Ping to dump huge continuous packet flows into network, the network performance would be heavily impacted. Can they be traped with first time alert? Thanks!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
yusuff Tue, 07/16/2002 - 01:28
User Badges:
  • Cisco Employee,

In order to monitor your network and check unusual activities, you have to sniff the traffic and see for anything irrregular. IDS (Intrution Detection System) is what you need, you can span your VLAN traffic to the IDS box and IDS box has a signature database which will alert you if there is unusual/irregular traffic pattern eg; ping floods, port scan, etc.


Check the Cisco's website and you will find lots of information on Cisco IDS.


Some URLs

http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/index.shtml

http://www.cisco.com/univercd/cc/td/doc/pcat/nerg.htm

http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/prodlit/idsms_ds.htm


HTH

R/Yusuf

Actions

This Discussion