SYN Flood DoS

The attacker sends thousands of SYN packets with spoofed source IPs. The server allocates a TCB (half-open connection) for each, filling the backlog queue until legitimate connections are rejected.

Ready Click Next Step to watch a SYN flood exhaust the server's connection backlog.
Server Backlog (0 / 4)
Server State
Status LISTENING
Backlog 0 / 4
SYN cookies OFF
Event Log