In this tutorial I'll show you some tricks to find out by yourself if you are under DDOS attack or not.
Here are some usefull Linux commands:
#netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
To find if there is large number of HTTP process running use the command:
#ps -aux|grep HTTP|wc -l
#netstat -lpn|grep :80 |awk '{print $5}'|sort