Displaying 1 result from an estimated 1 matches for "dubbelbo".
Did you mean:
dubbel
2014 Jan 24
1
Possible SYN flooding on port 8000. Sending cookies
...low advises:
"This message can come a from a SYN
DDOS<http://en.wikipedia.org/wiki/SYN_flood>,
but in our case it was because of the amount of new connections one of our
application was receiving. The syslog message is emitted when the SYN
backlog of a socket is full."
http://blog.dubbelboer.com/2012/04/09/syn-cookies.html
Furthermore:
"While you see SYN flood warnings in logs not being really flooded,
your server is seriously misconfigured."
*A potential fix* - increase the net.ipv4.tcp_max_syn_backlog kernel
parameter. Or tune some more parameters like tcp_synack_retr...