1. Home > Web_defense >

Judgement of the type of DDOS attack on the server

(1) CC attacks

A. A service unavailable prompt appears on the website B. A high CPU usage rate C. Network connection status: netstat -na, if a large number of ESTABLISHED connection status is observed, a single IP is as high as several Ten or even hundreds of D. The external website cannot be opened, and it returns to normal in a short period of time after a soft restart, and it cannot be accessed after a few minutes. (2) SYN type attack A. CPU occupies high B. Network connection status: netstat -na, if a large number of SYN_RECEIVED connection status is observed (3) UDP type attack A. Observe the network card status and accept a large number of data packets per second B. .Network status: netstat -na TCP information is normal (4) TCP flood attack A. CPU occupies high B.netstat -na, if a large number of ESTABLISHED connection status is observed, a single IP can reach dozens or even hundreds

This article is published by www.internetweblist.com and does not represent the position of www.internetweblist.com/:http://www.internetweblist.com/Web_defense/28677.html

Contact Us

Online consultation:click here to give a message