search for: dubbelboer

...low advises: "This message can come a from a SYN DDOS<http://en.wikipedia.org/wiki/SYN_flood>, but in our case it was because of the amount of new connections one of our application was receiving. The syslog message is emitted when the SYN backlog of a socket is full." http://blog.dubbelboer.com/2012/04/09/syn-cookies.html Furthermore: "While you see SYN flood warnings in logs not being really flooded, your server is seriously misconfigured." *A potential fix* - increase the net.ipv4.tcp_max_syn_backlog kernel parameter. Or tune some more parameters like tcp_synack_retrie...