Question
How can I use Wireshark to analyze HTTP flood attacks?
Asked by: USER3458
54 Viewed
54 Answers
Answer (54)
Filter for 'http' and examine the 'http.request.method' field. Look for a high volume of GET or POST requests from numerous IPs. Analyze the 'http.request.uri' field for repetitive URLs, which can indicate a targeted flood. Also, check the 'http.user_agent' field for unusual or bot-like agents.