On Sun, 17 Jul 2011, DEEDSD at nationwide.com wrote: > Is there a way to tell if it is an icmp flood, or what? tcpdump permits viewing the packet headers, and may be limited to look only at content from specified netblocks -- Russ herrold