The problem that can occur with TCP is when a rogue client forges an IP packet with a bogus source address, then floods a server with TCP SYN packets.
当恶意客户机使用虚假的源地址来伪造一个IP报文时，TCP就会出现问题了，这会大量 TCPSYN报文攻击服务器。
The server allocates resources for the connections upon receipt of the SYN, then under a flood of SYN packets, eventually runs out and is unable to service new requests.
服务器在接收syn报文之前，要为连接分配资源，但是在大量产生SYN报文的情况下，最终会耗尽自己的资源，从而无法处理新的请求。
You can specify which incoming TCP packets to scan and discard those that don't match the flags ack, FIN, PSH, RST, SYN, or URG.
可以指定应该扫描哪些到达的TCP数据包，丢弃不与ack、FIN、P SH、RST、syn或urg标志匹配的数据包。
The attack involves having a client repeatedly send SYN (synchronization) packets to every port on a server, using fake IP addresses.
攻击包括有一个客户端多次发送SYN数据包（同步）服务器上的每个端口，使用假的IP地址。
For example, the initial SYN request can be a gold mine (as can the reply to it). RST packets also have some interesting features that can be used for identification.
例如，初始化的SYN请求是一个金矿以为这个SYN请求是要回复的，RST信息包也具有一些比较有趣的特征用来鉴别系统。
For example, the initial SYN request can be a gold mine (as can the reply to it). RST packets also have some interesting features that can be used for identification.
例如，初始化的SYN请求是一个金矿以为这个SYN请求是要回复的，RST信息包也具有一些比较有趣的特征用来鉴别系统。
应用推荐