practical reasons information concerning sizes will be transmitted in configurable preferably regular time intervals this method is a good choice for many cases as there are multiple kinds of attacks for which only the number of blocked packets per period indicates the end of the attack using such a method is particularly a good choice if the data volume represents a critical factor due to limited resources as the load caused by this method is significantly less than the load that would be created by redirecting the packets to the attack detection system in addition it costs much less effort to observe the counters for packets and amounts of data regularly than inspecting the attacking packets continuously themselves regarding high flexibility it can be provided that the information provided to the attack detection system or its co operating system will be analyzed by the aid of configurable i e in particular changeable and adjustable parameters for some specific attacks it can be advantageous to analyze the provided information concerning the determination of the source of the attack in addition statistics of the attacks can be built up on the base of the analyzed information which can lead to a better understanding of the attacks on one hand and to a development of farther.