SYN flood
A type of denial of service attack in which a large number of TCP SYN packets (the first packet in a TCP/IP connection), usually with spoofed source IP addresses, are sent to a target.
The target system replies with the corresponding ACK packets and waits for the final packet of the TCP/IP three-way handshake. Because the source IP address of the initial packet was spoofed, the target never will receive the final packet, leaving it to hold TCP/IP sessions open until they time out.
A SYN flood causes so many TCP/IP open sessions that the system becomes overwhelmed and cannot handle any more network traffic.
From Denial of service: Fighting back, Network World, 09/02/02.
Additional resources
SYN Floods
More info from ISS.
Topic: Security
Latest security news, analysis and newsletters from Network World Fusion.
Comments:
system administration
by jamil
This is very good tool.
Add a comment
