早上到公司,网络又很卡,难道攻击死灰复燃?
赶紧登陆路由器查看
sh processes cpu sorted | exclude 0.00
CPU utilization for five seconds: 99%/18%; one minute: 99%; five minutes: 99%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
335 2173484 74938 29003 49.63% 53.36% 59.70% 0 DNS Server Input
334 270936 73221 3700 22.92% 18.58% 10.91% 0 DNS Server
160 322784 73984 4362 7.56% 7.93% 8.77% 0 IP Input
30 900 790 1139 0.40% 0.07% 0.04% 132 Virtual Exec
32 2608 12030 216 0.08% 0.07% 0.08% 0 ARP Input
327 3860 5233 737 0.08% 0.10% 0.08% 0 IP NAT Ager
114 2124 36866 57 0.08% 0.06% 0.07% 0 VRRS Main thread
目测攻击方式变了
关掉dns服务看看?
conf t
no ip dns server
果不其然,路由器负载立刻降下来
这谁多大仇,换法攻击我们
考虑让老板掏钱买台防火墙加到网络入口处