Hi, I noticed in my IPS log that there are a LOT of entries for "UDP flood detected" for my PC's BitTorrent traffic.
I tried increasing the packet rate thresholds, all the way to 9999, but it doesn't reduce the logging.
IPTraf only shows about 100 packets/sec max (per connection).
Perhaps I am misunderstanding the documentation.
I have it set to the default mode: "Both Source and Destination Addresses"
I assume that means that it has a counter for EACH COMBINATION of source+dest, but it seems more like it has one counter for source and one for dest, and my dest counter (ext IP) is too high.
Which is correct?
Thanks,
Barry
This thread was automatically locked due to age.