> So I make some caculation, every second, there are 16035 byte attack (I call
> "attack" because I was not allowed.
> Everybody help me explain this situation. I know, A request does not have
> big capacity and my ISA server was not logged any attack!
This sounds fishy. 16k a second in scans and other Internet trash is
definitely possible, but it seems quite extreme for a company that had
7gig total normal traffic.
In addition to logging the drops, I'd go with the earlier suggestion
to use mrtg and keep you ISP on its toes.
--
http://www.securitydocs.com/
Directory of Security White Papers
Received on Mar 01 2005