Traffic stopped on the router...
initial thought - reboot
didn't work
then I noticed 2 mbps upload speed passing..
did traffic analysis and found the ip.
I disabled the port on his switch (the actual device with the 2 mbps) and everything went back to normal
The customer told me on that port he has a MAG 254 IPTV box (which runs on linux)...
You are thinking probably an attack right ?
but why the whole network went down? ( I even block access on private network from his router firewall )
any ideas to prevent this again in the future?
