possible SYN flooding?

Alfredo Sanjuan (alfre@ibd.es)
Thu, 22 May 1997 22:17:24 +0200 (MET DST)


I have this warning in my logs... Is this really a SYN
flooding? I have the 2.0.30 with CONFIG_RST_COOKIES enabled in the kernel.
There is a way to watch the source address of them...?

May 22 15:12:20 facil3 kernel: Warning: possible SYN flooding. Sending
cookies.
May 22 15:12:24 facil3 last message repeated 3 times
May 22 15:12:41 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1187,
119, -13
59083465)
May 22 15:12:41 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1197,
119, 605
199252)
May 22 15:12:43 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1200,
119, 167
4757242)
May 22 15:12:43 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1201,
119, 102
6082327)
May 22 15:12:44 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1202,
119, -10
162713)
May 22 15:12:46 facil3 kernel: validated probe(599d4ac2, e9d4ac2, 1204,
119, -33
5236385)

Alfredo

---
Alfredo Sanjuan, Director Tecnico <alfre@ibd.es>
   Internet Business Development S.L. <http://www.ibd.es/>
   Do save Sex, use Condoms. Do save TeX, use LaTeX.