| Server IP : 216.250.13.251 / Your IP : 216.73.216.164 Web Server : nginx/1.24.0 System : Linux gunay 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64 User : root ( 0) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /usr/share/doc/bpfcc-tools/examples/tracing/ |
Upload File : |
Demonstrations of dddos.py, the Linux eBPF/bcc version. This tracks ip_rcv function (using kprobe) and elapsed time between received packets to detect potential DDOS attacks. The following steps illustrates the usage of dddos : 1 - Start dddos.py : # ./dddos.py DDOS detector started ... Hit Ctrl-C to end! TIME(s) MESSAGE 2 - Launch hping3 (or any other flooder) in another terminal as shown below: # hping3 localhost -S -A -V -p 443 -i u100 3 - dddos.py triggers alerts and reports a DDOS attack: DDOS detector started ... Hit Ctrl-C to end! TIME(s) MESSAGE 2019-01-16 11:55:12.600734 DDOS Attack => nb of packets up to now : 1001 2019-01-16 11:55:12.600845 DDOS Attack => nb of packets up to now : 1002 2019-01-16 11:55:12.600887 DDOS Attack => nb of packets up to now : 1003 2019-01-16 11:55:12.600971 DDOS Attack => nb of packets up to now : 1004 2019-01-16 11:55:12.601009 DDOS Attack => nb of packets up to now : 1005 2019-01-16 11:55:12.601062 DDOS Attack => nb of packets up to now : 1006 2019-01-16 11:55:12.601096 DDOS Attack => nb of packets up to now : 1007 2019-01-16 11:55:12.601195 DDOS Attack => nb of packets up to now : 1008 2019-01-16 11:55:12.601228 DDOS Attack => nb of packets up to now : 1009 2019-01-16 11:55:12.601331 DDOS Attack => nb of packets up to now : 1010 2019-01-16 11:55:12.601364 DDOS Attack => nb of packets up to now : 1011 2019-01-16 11:55:12.601470 DDOS Attack => nb of packets up to now : 1012 2019-01-16 11:55:12.601505 DDOS Attack => nb of packets up to now : 1013 2019-01-16 11:55:12.601621 DDOS Attack => nb of packets up to now : 1014 2019-01-16 11:55:12.601656 DDOS Attack => nb of packets up to now : 1015 2019-01-16 11:55:12.601757 DDOS Attack => nb of packets up to now : 1016 2019-01-16 11:55:12.601790 DDOS Attack => nb of packets up to now : 1017 2019-01-16 11:55:12.601892 DDOS Attack => nb of packets up to now : 1018 2019-01-16 11:55:12.601925 DDOS Attack => nb of packets up to now : 1019 2019-01-16 11:55:12.602028 DDOS Attack => nb of packets up to now : 1020 Remark : Use Ctrl-C to stop dddos.py