Case study – ICMP Flood or something else