hey does anybody know or have any info/links on how to detect DoS attacks
and the DoS'ers mac/ip address and how could i put a stop to that
Somebody's DoS'ing and it's killing nearly all of my bandwidth and making teh router choke i need eargent help :(

netstat gives all connections + IP & port
take a look in there (note yes it also exists for windows)

I think there are some firewalls that will record the IP address of an attacker.

yeah, BlackICE does it, zoneAlarm pro should too, no idea about norton

but my good ol' firestarter with IPTables does it perfectly in combo with syslog-ng :D