Hello,
currently we are experiencing a lot of very short but strong ddos attacks. i would like to setup a rmon alarm that detects anything over 5gbit/s. we are using a mixed stack with ex4500 and ex4200.
as far as i got im unable to lower 'interval' below 10, or i get empty values and false positives for falling-threshold. my issue is that according to my calculation 5gbit/s over 10 seconds are 6250000000 octets, but the maximun for rising-threshold is 2147483647.
any idear for a workaround? or am i doing the calculations wrong?
thanks a lot for your help!
regards