maytawn
asked on
SYN Timeout: Need a brief explanation
I need a quick explanation of what this means.
Jun 25 11:40:40 dsgatekeeper Jun 25 2008 11:40:40: %PIX-6-302014: Teardown TCP connection 43245574 for outside:74.202.21.66/62674 to inside:in-www/80 duration 0:00:30 bytes 0 SYN Timeout
What types of things could cause this?
Jun 25 11:40:40 dsgatekeeper Jun 25 2008 11:40:40: %PIX-6-302014: Teardown TCP connection 43245574 for outside:74.202.21.66/62674
What types of things could cause this?
ASKER
Where are we at in the process of the handshake? Did I send the SYN, but not get a response back? What response am I waiting for that I do not recieve and eventuallty time-out?
You got a SYN, sent back a SYN/ACK, but then there was no further communication.
If you get a LOT of those from the same source, that's called a SYN Flood attack.
Pretty pictures here:
http://en.wikipedia.org/wiki/SYN_flood
If you get a LOT of those from the same source, that's called a SYN Flood attack.
Pretty pictures here:
http://en.wikipedia.org/wiki/SYN_flood
ASKER
OK... so the time-out is caused by not receiving an ACK. Just to be clear... This could be caused by one of the following:
1) The SYNACK (that I sent) was never recieved.
2) The SYNACK was received, but ignored and no ACK was sent
3) The SYNACK was recieved and an ACK was sent back, but the packet was lost in transit and sever arrived.
Correct?
1) The SYNACK (that I sent) was never recieved.
2) The SYNACK was received, but ignored and no ACK was sent
3) The SYNACK was recieved and an ACK was sent back, but the packet was lost in transit and sever arrived.
Correct?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Oh-- one last note: If a properly functioning host had decided not to follow through on the connection-open SYN request, it would have responded with a RST packet when it received your SYN/ACK packet. That would not have produced the timeout message.
It's the TCP equivalent of getting called by a telemarketer, answering the phone, then getting nothing but dead silence. Eventually you get frustrated ("time out") and hang up.