|
Deal only with a true BGP'd host that can trace the attack back though its pipes. Fairly easy to see where tons of inbound bandwidth is coming from.
A good host would trace it back and isolate which network is coming from.
All of the networks involved will see the spike of bandwidth coming through.
Of course, this is not true in all situations, especially very diverse and geographically scaled DDoS attacks. Having the proper network filters in place can help mitigate the affects of a DDoS. They are not always entirely preventable however they can be tamed into a mere nuisance.
:-)
Cheers.
|