Re: WARNING

From: Matthew <matthew@dont-contact.us>
Date: Wed, 10 May 2000 22:30:39 +0100 (BST)

On Thu, 11 May 2000, Samir wrote:

> WARNING: High TCP connect timeout rate! System (p
> ort 8080) may be under a SYN flood attack!
>

interesting. if this is correct then you are recieving lots of SYN
packets without recieving an acknoledgement packet, otherwise known as
a "half-connection". A syn packet is a packet that initiates a tcp
connection, when this is recieved, it sends back an ACK packet, but
the remote computer is not sending a SYN_ACK thus the connection is
not completed. each port can only handle a certain number of pending
connections at once. so if port 8080 is full up with half-connections
then no one else can initiate a connection on port 8080. thus
denial-of-service is achieved.

your system could be under attack. or maybe... well i can't think of
another explanation right now!

> can any one explain ????
> thanx for reply in advance :)
>
>
Received on Wed May 10 2000 - 15:33:59 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:53:27 MST