[paulddraper]

I wouldn't call it tracing, but the usual mitigation is block IPs.

Depending on the nature of the DDoS, you may block it at other parts of the stack.