# Layer 7 DoS attacks **URL:** \ **Category:** Zeek\ **Created:** [April 17, 2017, 5:10am UTC](https://community.zeek.org/t/layer-7-dos-attacks/4781 "2017-04-17T05:10:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![RoM](https://avatars.discourse-cdn.com/v4/letter/r/3e96dc/32.png) [@RoM](https://community.zeek.org/u/RoM)\ **Post date:** [April 17, 2017, 5:10am UTC](https://community.zeek.org/t/layer-7-dos-attacks/4781/1 "2017-04-17T05:10:12Z")
Hi all, I saw an interesting post ([http://mailman.icsi.berkeley.edu/pipermail/bro/2012-January/004508.html](http://mailman.icsi.berkeley.edu/pipermail/bro/2012-January/004508.html))about detecting layer 7 DoS attack using Bro, there was a script written by Seth Hall([seth@corelight.com](mailto:seth@corelight.com))([http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120109/84fdf6c0/attachment.obj](http://mailman.icsi.berkeley.edu/pipermail/bro/attachments/20120109/84fdf6c0/attachment.obj)), but the script won’t work in the new version of Bro, so I was wondering if anyone had any idea on how to do it in Bro 2.5? Thanks for any feedback in advance! ---
**Author:** ![seth](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/seth/32/642_2.png) [@seth](https://community.zeek.org/u/seth)\ **Post date:** [April 17, 2017, 5:24pm UTC](https://community.zeek.org/t/layer-7-dos-attacks/4781/2 "2017-04-17T17:24:48Z")
D'oh! Sorry, I ran a version I have on my laptop which was updated. I attached the version of the script that works now... [http-DoS-detector.bro](https://community.zeek.org/uploads/short-url/5P48Y5hXGBP941kHBvBGguHwjGL.bro) (2.42 KB) ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/layer-7-dos-attacks/4781/3 "2022-05-06T15:44:50Z")
Closed on May 6, 2022, 3:44pm UTC