]> git.baikalelectronics.ru Git - kernel.git/commit
tcp: Change possible SYN flooding messages
authorEric Dumazet <eric.dumazet@gmail.com>
Tue, 30 Aug 2011 03:21:44 +0000 (03:21 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 15 Sep 2011 18:49:43 +0000 (14:49 -0400)
commitd7afd300e9aec87174dc2a8bb5e9283efbdcaf24
treefbb0d9c8dc11d6efee64e2a077a4951831932058
parent745eeb50bea31e585ce1db7703ddd78b2220d211
tcp: Change possible SYN flooding messages

"Possible SYN flooding on port xxxx " messages can fill logs on servers.

Change logic to log the message only once per listener, and add two new
SNMP counters to track :

TCPReqQFullDoCookies : number of times a SYNCOOKIE was replied to client

TCPReqQFullDrop : number of times a SYN request was dropped because
syncookies were not enabled.

Based on a prior patch from Tom Herbert, and suggestions from David.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
CC: Tom Herbert <therbert@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/snmp.h
include/net/request_sock.h
include/net/tcp.h
net/ipv4/proc.c
net/ipv4/tcp_ipv4.c
net/ipv6/tcp_ipv6.c