"...The key reason to run this is to understand if you might be
under a syn-flood attack. If you see an excessive number of
connections in the SYN_RECV state, you may be under a syn-flood
attack. It is normally unusual to see a high percentage of
connections in a SYN_RECV state."
