Four Commands to Analyze Connection Usage under Linux
Jul 29, 2008, 15:30 (0 Talkback[s])
"...The key reason to run this is to understand if you might be
under a syn-flood attack. If you see an excessive number of
connections in the SYN_RECV state, you may be under a syn-flood
attack. It is normally unusual to see a high percentage of
connections in a SYN_RECV state."