在我们的Linux服务器上,我们不时会收到众所周知的SYN洪流消息:这可能不是攻击,因为网站流量很大。Aug 16 01:23:45 amadeus kernel: possible SYN flooding on port 80. Sending cookies.Aug 16 01:25:05 amadeus kernel: possible SYN flooding on port 80. Sending cookies.Aug 16 01:26:06 amadeus
Check SNMP counters.[502774.659596] TCP: request_sock_TCP: Possible SYN flooding on port 25.Check SNMP counters.
[895350.161021] TCP: request_sock_TCP: Possible SYN flooding on po
Jan 17 02:07:26 luna kernel: [10617.487372] TCP: request_sock_TCP: Possible SYN flooding on port 1337Jan 17 14:31:22 luna kernel: [55253.978408] TCP: request_sock_TCP: Possible SYN flooding on port 1337Jan 17 14:31:23 luna kernel: [55254.164176] TCP: request_sock_TCP: Possible SYN
TCP: Possible SYN flooding on port 59380. *Sending cookies*. Check SNMP counters.下次必须重新启动服务时,将记录以下消息
TCP: Possible SYN flooding on port 59380. *Dropping request*.