Four Commands to Analyze Connection Usage under Linux
Jul 29, 2008, 15:30 (0 Talkback[s])
Re-Imagining Linux Platforms to Meet the Needs of Cloud Service Providers
"...The key reason to run this is to understand if you might be
under a syn-flood attack. If you see an excessive number of
connections in the SYN_RECV state, you may be under a syn-flood
attack. It is normally unusual to see a high percentage of
connections in a SYN_RECV state."