[ 9829.011943] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:24800. Sending cookies.

Paying off DoS attackers with cookies. kernel devs are genius.

Reply to this note

Please Login to reply.

Discussion

They are just encouraging the behavior! ๐Ÿคฃ

What I have been always wondering is why TCP SYN cookies are not enabled by default in Linux kernel.

Are they not ? I just saw this in my dmesg

I had to ask ChatGPT what this means. It gave a pretty good explanation even without any context. ๐Ÿ˜…

Please share ๐Ÿ˜…

Hello, this is Bing. I can try to explain this comment for you. ๐Ÿ˜Š

The comment is referring to a type of network attack called **SYN flooding**ยน, which aims to make a server unavailable by sending many connection requests without completing them. The server has to wait for the final acknowledgement from the attacker, which never arrives, and eventually runs out of resources to handle legitimate trafficยฒ.

To prevent this, the server can use a technique called **SYN cookies**ยณ, which involves sending a specially crafted response to the attacker that encodes the information needed to establish the connection. This way, the server does not have to keep track of the half-open connections, and can free up resources for other requestsโด.

The comment is jokingly suggesting that the server is "paying off" the attacker with cookies, meaning that it is sending SYN cookies to avoid the SYN flooding. The comment also praises the kernel developers for implementing this technique in the Linux operating systemโต.

I hope this helps you understand the comment better. If you have any other questions, feel free to ask me. ๐Ÿ˜Š

Source: Conversation with Bing, 1/2/2024

(1) SYN flood - Wikipedia. https://en.wikipedia.org/wiki/SYN_flood.

(2) SYN flood DDoS attack | Cloudflare. https://www.cloudflare.com/learning/ddos/syn-flood-ddos-attack/.

(3) What Is a SYN Flood Attack? | F5. https://www.f5.com/glossary/syn-flood-attack.

(4) . https://bing.com/search?q=Sending+cookies.

(5) Larry's Cookies. https://larryshomemade.blogspot.com/.

(6) Baked & Wired. https://bakedandwired.com/.

(7) Safeway. https://local.safeway.com/safeway/dc/washington/1601-maryland-ave-ne.html.

(8) The Cupcake Delivers. https://www.thecupcakedelivers.com/.

(9) Cookie Delivery & Cookie Gifts โ€“ Mrs. Fields. https://www.mrsfields.com/.

(10) How to Mail Cookies - Allrecipes. https://www.allrecipes.com/article/how-to-mail-cookies/.

(11) Using HTTP cookies - HTTP | MDN - MDN Web Docs. https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies.

(12) How to send cookies in the mail | Canadian Living. https://www.canadianliving.com/food/baking-and-desserts/article/how-to-send-cookies-in-the-mail.

This is one of the times that I realise Iโ€™m not as smart as I think I am

Isnโ€™t that why we have LLMs? ๐Ÿคฃ

I guess so ๐Ÿ˜‚ I try to learn myself though