lots of connections in SYN_RECV state

[Valdis.Kletnieks at vt.edu]

On Fri, 07 Nov 2014 23:49:35 +0800, Dave Tian said:
> Latest kernel provides a TCP SYN Cookie feature to defense from SYN flooding.

If by "latest" you mean "since Andi Kleen submitted a patch for 2.1.44",
back in July 1997....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 848 bytes
Desc: not available
Url : http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20141107/04ef8f13/attachment.bin