similar to: FreeBSD DDoS protection

Hi Guy, I am trying to figure out how & where can i get the bandwidth usage utilization statistic info for all the VM, so in the end i will be able to use it for metering purpose.. Anyone got any idea ? Regards, Peter -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi Guys I''m trying to measure the traffic of domUs using vnstat without luck. My configuration: Debian 6.0.3 xen 4.0.1 vnstat 1.11 I''m using bonding with two network cards. auto bond0 iface bond0 inet manual slaves eth0 eth1 bond-mode active-backup bond-miimon 100 bond-updelay 200 bond-downdelay 200 bond-primary eth0 auto br0 iface br0 inet static

I'm wondering if I'm seeing a regression of 5616 with 3.4.8. I'm trying to set-up pptpd with winbind, which I'm doing on two machines on Debian lenny, and I'm trying on Debian Squeeze now. The Windows client is saying "Error 778: It was not possible to verify the identity of the server." The logs say that everything is ok, and that the client is hanging up the

Hi all, I need to setup a netflow reporting tool under CentOS server to collect traffic data from several firewalls. What netflow tool do you recommends me? Of course, Open source. Many thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20061114/b862b4c1/attachment-0002.html>

I don't know why I haven't signed up for this list before since we use CentOS all over the place. The list is very useful and it is good for me to participate and "give back" to the community. Anywho, I wanted to post this response to a thread that was created back in November 2008 about the ntop daemon failing to start. I'm currently setting up ntop as a NetFlow &

Pp ------Original Message------ From: nate Sender: centos-bounces at centos.org To: CentOS Mailing list ReplyTo: CentOS Mailing list Sent: Feb 23, 2009 8:13 PM Subject: Re: [CentOS] cisco netflow analyzer? Robinson Tiemuqinke wrote: > Anyone knows any Cisco netflow analyzer that could run on Linux/Windows? I > know that cisco ASDM works at somewhat level but too rough... > > For

Blame guus. -- Rob 'robster' Bradford Chief Editor/Lead developer DebianPlanet.org -------------- next part -------------- Sep 1 10:24:02 zeus syslogd 1.4.1#2: restart. Sep 1 10:24:17 zeus pppd[326]: rcvd [LCP EchoRep id=0x92 magic=0x9936a81f] Sep 1 10:24:47 zeus pppd[326]: sent [LCP EchoReq id=0x93 magic=0x48b43815] Sep 1 10:24:47 zeus pppd[326]: rcvd [LCP EchoRep id=0x93

Hi all, is it possible to monitor guest's interface's stat which uses SR-IOV virtual function? I don't know how qemu/libvirt implement monitoring, if functions like interfaceStats are implemented in the host, I think there's little chance to do this due to SR-IOV's nature, is it right? If i can't use libvirt to monitor SR-IOV interfaces, is there another way to do

Hi folks, is it possible to monitor and gather statistics in realtime (CPU, memory, HDD, network, ... - something like dstat) of guest systems with libvirt through console from host system (KVM based)? If yes, do those guests need to be created through libvirt? Thanks for your help and time.

Hi, I am trying to create a report across all my KVM hypervisors using libvirt API and I need some assistance in figuring out the right API calls. My report will contain the total available memory, CPU, disk across all hypervisors, versus the amount used by the virtual machines. This report will help figure out if we are running low on hypervisor disk, CPU or memory and if we need to add more. I

Would it be possible to list the Host sFlow project in the Monitoring section of http://libvirt.org/apps.html? Host sFlow <http://host-sflow.sourceforge.net/> Host sFlow is a light weight agent running on KVM hypervisors that links to libvirt library and exports standardized cpu, memory, network and disk metrics for all virtual machines using sFlow protocol. Thanks, Peter

Hello, Recently I''ve received some complaints that there is excessive but intermittent latency of network traffic to domUs on some of my servers. Upon investigation it seems that on some servers, indeed traffic is occasionally delayed by up to 140ms where something like 5ms RTT would be expected. The average RTT is not unusual; since this is only occasional packets it only affects the

Hi all, I''ve got XCP 1.0 up and running nicely and would like to use it in production. However I''m struggling with the concept of bandwidth management. It seems like such a common problem that everyone must have, but I can''t find any clear direction in which to go. The dedicated host I am using (Hetzner) gives me a 5TB monthly bandwidth quota which needs to be shared

VM traffic is already limited by a throughput limit, but there is no control over the maximum packet per second (PPS). In DDOS attack the major issue is rather PPS than throughput. With provider offering more bandwidth to VMs, it becames easy to coordinate a massive attack using VMs. Example: 100Mbits ~ 200kpps using 64B packets. This patch provides a new option to limit VMs maximum packets per

Hi, I have noticed that virt-manager has the ability to show me the current cpu- and memory-usage of both the host and running guest machines. How does it do that? I could make good use of that information myself in the client applications I'm writing, however, from what I can see on http://libvirt.org/html/libvirt-libvirt.html, I have no idea how to go about getting it from libvirt. In

Hi, How can I tell shorewall to block any ip address if it generate x no of request within x no of seconds. I want to filter SYN, ICMP and HTTP Get floods etc. Is it possible have a minimum local level deterrence against ddos attacks at firewall level? -- AzfarHashmi Cloudways Your Managed Cloud e: azfar.hashmi@cloudways.com w: www.cloudways.com <http://www.cloudways.com> PGP

well, on a large enough scale, it won't matter even if the server drops them, it will clog the nic way before it even gets to the server.. On Wed, Jun 6, 2018 at 9:40 AM Roman <romeo.r at gmail.com> wrote: > > вт, 5 июн. 2018 г., 23:17 Yahav Shasha <yahav.shasha at gmail.com>: > >> Server software firewall cannot help with ddos attacks. >> > > I

Hi All, I have an asterisk box on my DMZ, and I'm using a PF for my firewall, I can make a call but some reasons I have a dead air. Any Ideas? below are my rules... ext_if = "bce0" int_if = "bce1" altitude = "172.16.1.0/24" #### machines #### vbox = "172.16.1.1" uci = "172.16.1.4" voices = "203.172.x.1" ipc =

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

https://bugzilla.mindrot.org/show_bug.cgi?id=1944 Bug #: 1944 Summary: Wrong "Date flow start" and "Duration Proto" in version 9 with nfcapd Classification: Unclassified Product: softflowd Version: -current Platform: amd64 OS/Version: FreeBSD Status: NEW Severity: