1、查看连接状态
netstat -nat | awk '/^tcp/{++S[$NF]}END{for (a in S) print a,S[a]}'
2、防御措施
vi /etc/sysctl.conf
添加
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
sysctl -p
转载于:https://blog.51cto.com/250688049/1254003