Re: SYN flood and IP spoofing

2001-10-22 Thread Mike Silbersack
On Sun, 21 Oct 2001, Fernando Gont wrote: > >That's an old explanation; basically any OS released in the last few years > >will throw old/random connections out of the queue when it fills up. > > Anyway, I wonder how the old implementations behaved, and why they behaved > like that. I don't thi

Re: SYN flood and IP spoofing

2001-10-21 Thread Fernando Gont
At 14:17 20/10/2001 -0500, Mike Silbersack wrote: > > I've read some explanations about the SYN flood DoS attack. > > I understand that when the attacker fills the listening queue of the > > attacked host with incomplete connections, the attacked host will not > > reply to any SYN it receives aft

Re: SYN flood and IP spoofing

2001-10-20 Thread Mike Silbersack
On Sat, 20 Oct 2001, Fernando Gont wrote: > Hi! > > I've read some explanations about the SYN flood DoS attack. > I understand that when the attacker fills the listening queue of the > attacked host with incomplete connections, the attacked host will not > reply to any SYN it receives after that

SYN flood and IP spoofing

2001-10-20 Thread Fernando Gont
Hi! I've read some explanations about the SYN flood DoS attack. I understand that when the attacker fills the listening queue of the attacked host with incomplete connections, the attacked host will not reply to any SYN it receives after that. However, I don't understand why it will not even rep