[sagher]

I don't think so it was an serious attack which not encounterable. i try to workout with ntop and iptraf programs. and try to monitor which input makes high value. and i stop it manually by blocking rules. and it's works for me right now. b/w controlled this time. but i still monitor it. let's see what happened.