SYN Flood Attack Explained

[@Bess_Gates]

وانت بتشرح الفديو ده جه في دماغي مثال حلو تخيلت إن فيه زبون بيتصل بمطعم ويطلب أوردرات كتير، ويقولهم: "ابعتوا الأكل على العنوان ده"، بس هو في الحقيقة بيديهم عنوان غلط. المطعم بيبدأ يحضر الأوردرات ويحجز موارد (زي الدليفري والتغليف)، بس لما الدليفري يوصل، يكتشف إن مفيش بيت في العنوان ده و محدش مستني الأوردر. إيه اللي حصل؟ المطعم (السيرفر) بيستهلك موارده على طلبات وهمية (SYN Requests)، وفي نفس الوقت مش قادر يخدم الزباين الحقيقيين لأن الموارد كلها محجوزة. بحب افكر في الحاجات دي بامثله من ارض الواقع بتكون لذيذه

[@AyaRavelle]

Nice one

[@Bess_Gates]

فديو جميل بشمهندس حسين شكرا D:

[@oluwaseyiadeleye9558]

Nice! This really did justice to the SYN flood attack

[@muhammadamir-fq5nl]

Woah! Great explanation. Thumbs up!!!!!

[@coreymcmillan7990]

Really clear explanation! Thank you!

[@mutedly]

What an amazing explanation! Thank you so much 💙

[@googtech]

Learned and Thanks for your tutorial.

[@jupru220]

Thank you. That's a great explanation - I appreciate you sharing your knowledge!

[@Christopher-uk5tw]

Good video having detail explanation. Thanks you so much !!

[@hnasr]

Glad it helped!

[@ShueperDan]

Such a great explanation, thank you.

[@ayahjalal470]

that was a perfect explanation bro!! thankssss , btw are u saudi? because i have a saudi friend thats her family's name is nasser.

[@abasov1396]

Super explanation - Thanks!!!

[@nathanc4407]

SYN Floods usually target bandwidth and not memory, right? SYN Spoofing will target the TCP table in memory

[@aalsolaiman]

Great job, Keep it up

[@SW-nx4jz]

Very helpful explanation! Thank you so much man

[@hannibalimter4685]

thank you habibi

[@عدولةكن]

Thanks you, can l hehp you I want to use this protcol with Stepping stone algorithms

[@93kazem]

How to mitigate this? Is there like a timeout that you can set that will close the half open connection?

[@hnasr]

Firewalls mainly detect this and prevent it with deep packet analysis. They notice that hey, the server been sending SYN/ACKs but those clients are not replying so let us block this kind of traffic. Machine learning plays big rule here. I believe there is also a low level TCP timeout (SYN/ACK) timeout but the problem you don't want this to be set to very low otherwise normal connections will suffer.

[@ravinaidu7062]

@@hnasr thanks much

[@NatureNomad1710]

Please create a video on Cloudfare outage which occured on 18 july

[@hnasr]

Nikhil Sharma I have my notes on this topic you read my mind 😊

[@NatureNomad1710]

@@hnasr thanks for the fan moment :)

[@surfindrunk]

Thank you!!!

[@sugardoughnuts]

ha-interesting. thank you!

[@xyottax4925]

Hi! Great video. But I would like to know this: If the c IP address (4:20) is an address of a real computer will the computer send an “ACK” back to the server or will it just ignore the “SYN ACK”? Thanks in advance! (PS:I’m really sorry for my English I’m not a native speaker)

[@williamwolseley-charles2045]

the "real" computer wouldn't send anything because maybe the port is closed or it isn't expecting a request to be sent to that port, therefore it will simply do nothing and ignore it.

[@rfc-793-darpa]

@@williamwolseley-charles2045 Just what I had thought, if you are lucky enough to get the IP right, you gotta a 1/65536 port chance, maybe more than one (port) eventually

[@aviad_hayumi9166]

Like your content , thank you :)

[@arandomdude8701]

Why does a syn flood need to be distributed? Cant it all come from a single device?

[@yayacamara7176]

The single device can easily be detected and consequently ignored

[@vxvbvcnvxcxnx3306]

Great explanation. And you're humorous as fuck.

[@jxw7196]

Brill

[@ca7986]

❤️

[@ZelenoJabko]

Needs 7 minutes to explain something that would need no more than 20 seconds.

[@moayadyaghi]

Get well