Hi,
I am wondering if cisco routers are able to mark packets, or log packets, or rewrite packets in order to traceback an IP address in case of a DoS attack or DDoS attack?
As far as I'm concerned cisco routers are limited in providing information for IP traceback. Is there any mechanism in the router to actually record, or track an IP address, or rewrite the IP saying it came from this interface and it went out that interface.
I have heard about EEM and writing scripts, but I am not sure if this works??
Am actually doing a research in IP traceback with cisco routers, and would want to know what the possibilities are with cisco routers...
Thankss..
Kenneth Chong
