D-Link DGS-6600-48TS Configuration Guide - Page 451

Volume 8-DoS Protection / Chapter 41-DoS Protection CLI DB DoS Application Module Manager Hardware Abstraction Layer Hardware Chip Operation Concepts Log module Operation Concepts Mechanism When the DoS prevention mechanism turn on, inbound packets will be compared to pre-defined DoS attack pattern. If the pattern matched, the device will drop//log the packet according to user configured action. Most packet matching and actions (drop) are handled by hardware. (Due to the hardware limitation the Smurf Attack will be handled by software.) Actions Action Drop Trap/Log Description Will drop all attacking packets. By default drop is turned on and cannot be disabled. Users can configure trap/log action to log or send trap. When the action configured, the trap/log will be triggered once every 5 minutes, if there are attacking packets received in previous 5 minutes, the module will log and send trap. Attack Types The following table lists different DoS attack types. DGS-6600 Configuration Guide 451