Re: SYN trouble, hardware or software?

Nigel Metheringham (Nigel.Metheringham@ThePLAnet.net)
Thu, 23 Jul 1998 09:41:37 +0100


ak@muc.de said:
} Also note that it is not always an attack - some outdated Mac and old
} 3.1 Windows stacks (wintrumpet) had bugs that lead them to cause a
} syn flood in some circumstances.

Network problems - asymmetric routing where the return route doesn't work
right at all - can also cause apparent syn floods. Locally, a large modem
pool or incoming dynamic connections can also cause short lived problems
of this type (it can take a short time for the network to have the routing
straight during which time packets can go one way but not the other).

In short, something reported as a SYN flood warrents investigation, not
panic, nor is it evidence of any form of malicious action.

Nigel.

-- 
[ Nigel.Metheringham@theplanet.net   -  Systems Software Engineer ]
[ Tel : +44 113 207 6112                   Fax : +44 113 234 6065 ]
[      Real life is but a pale imitation of a Dilbert strip       ]

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html