2 1/2 minutes non-stop syn attack from 11.2(master) and 11.3(agent) r97- idip enabled, rate limiter r99- idip enabled, rate limiter, idip firewall client No subnet blocking in attack mitigation snort on s1, 13.1, with idip enabled reporting mechansim Baseline test Using tcp client/server streaming data for testing and statistical gathering.