looking for traffic sources aimed at

If anyone has some spare cycles and wants to help disrupt a DDoS, if you
can look for traffic sourced within your network, destination port 80, I'd appreciate it.

I've been under attack for about the last 12 hours.

Other pointers to resources to trace the miscreants responsible would
also be appreciated.


To tie this in to another thread - Alan is somebody who understands you
probably have operational logs going back 12 hours, but won't have them
90 days from now, so he's asking now. :slight_smile: