"Possible SYN flooding on port xxxx " messages can fill logs on servers. Change logic to log the message only once per listener, and add two new SNMP counters to track : TCPReqQFullDoCookies : number of times a SYNCOOKIE was replied to client TCPReqQFullDrop : number of times a SYN request was dropped because syncookies were not enabled. Based on a prior patch from Tom Herbert, and suggestions from David.
Showing the changes to include/linux (1 of 6 files). Show all
Unified · Split
| @@ -231,6 +231,8 @@ enum · 230 unmodified lines | ||
| 231 | 231 | LINUX_MIB_TCPDEFERACCEPTDROP, |
| 232 | 232 | LINUX_MIB_IPRPFILTER, /* IP Reverse Path Filter (rp_filter) */ |
| 233 | 233 | LINUX_MIB_TCPTIMEWAITOVERFLOW, /* TCPTimeWaitOverflow */ |
| 234 | + LINUX_MIB_TCPREQQFULLDOCOOKIES, /* TCPReqQFullDoCookies */ | |
| 235 | + LINUX_MIB_TCPREQQFULLDROP, /* TCPReqQFullDrop */ | |
| 234 | 236 | __LINUX_MIB_MAX |
| 235 | 237 | }; |
| 236 | 238 | |