Monitor DoS attack on the router

[rmrahman0302]

Hi,

How to monitor DoS attack on the router? My router is getting aggressive and cutting down the session.

Thanks.

[rstanisl]

Hi,

One way to find out the traffic coming into or going out of the interface is to enable "ip route-cache flow" under the interface

show ip cache flow command will show you the source and destination interface info to help you track down a specific host that could be causing the issue.

it can be chatty if your cpu is very high i would not recommend.

hope this helps

Raymond

[sfaizul]

I agree with Raymond ,show ip cache flow command will show you the source and destination interface info to help you track down a specific host that could be causing the issue.

Then you can configure Control plane policy to limit the traffic to cpu.

Regards
syed.