Can someone give specific - and i mean specific commands for detecting DoS and DDoS attach on Linux? Specifically I am running lighttpd web server. So Apache junk does not help me. Also interested in recommendations of best open source DoS and DDoS detection software to run generally... thanks.
I run netstat commands to count IPs connecting - but still not clear what "results" constitute evidence of an attack... thanks.