Page 1 of 1

Basic commands to check DOS attack

Posted: Fri Sep 28, 2012 11:45 am
by a24uall
Number of httpd connections from EXTERNAL IP ADDRESS
netstat -alpn | grep :80 | awk '{print $5}' | cut -d: -f1 |sort |uniq -c
Number of httpd connections associated with SERVER IP ADDRESS
netstat -alpn | grep :80 | awk '{print $4}' | cut -d: -f1 |sort |uniq -c
netstat -n -p|grep SYN_REC | wc -l