Ken Hardy wrote:
> So the SYN-ACK packets were never
> received by the client, so the client never sent the ACK packet. I
> conjectured that the server was filling up with half-open connections
> and could not accept any more until they timed out.
Great. A classic "SYN flood" attack, but this time by accident rather
than by maliciuos design.
> Could this be the per-process limit of 5 (on sunos) of pending
> connections in the listen(2) queue?
Sure. Have look at listen(2).
-- ----------------------------------------------------------------- Dipl.-Inform. Martin Ibert, BB-DATA GmbH, phone: +49-30-245-56582 Brunnenstraße 111, D-13355 Berlin, Germany, fax: +49-30-245-56577 --------------------------------------- mailto:mib@ppe.bb-data.deReceived on Fri Jan 24 1997 - 01:45:32 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:34:10 MST