LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   howto track DDoS attack on a linux server (https://www.linuxquestions.org/questions/linux-security-4/howto-track-ddos-attack-on-a-linux-server-858530/)

golden_boy615 01-25-2011 08:11 AM

howto track DDoS attack on a linux server
 
hello
I wanted to know how can I track a Dos and DDoS attack on a server . Does linux have any goiod known command line utilities and log files to us e in this way?

unixfool 01-25-2011 08:31 AM

It depends on how the DDoS is happening, IMO.

The netstat command should help in diagnosing such issues, along with 'ps' or top (for checking system resource utilization [cpu/mem] and the amount of resources a process or processes may be utilizing). Service logs may also help some.

Note that there is no "magic sauce" for remediating DDoS (ie, there's no solution unless you work at a very large company that has its own backbone).


All times are GMT -5. The time now is 09:26 PM.