On Thu, 11 May 2000, Samir wrote:
> WARNING: High TCP connect timeout rate! System (p
> ort 8080) may be under a SYN flood attack!
>
interesting. if this is correct then you are recieving lots of SYN
packets without recieving an acknoledgement packet, otherwise known as
a "half-connection". A syn packet is a packet that initiates a tcp
connection, when this is recieved, it sends back an ACK packet, but
the remote computer is not sending a SYN_ACK thus the connection is
not completed. each port can only handle a certain number of pending
connections at once. so if port 8080 is full up with half-connections
then no one else can initiate a connection on port 8080. thus
denial-of-service is achieved.
your system could be under attack. or maybe... well i can't think of
another explanation right now!
> can any one explain ????
> thanx for reply in advance :)
>
>
Received on Wed May 10 2000 - 15:33:59 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:53:27 MST