Re: SYN rate statistics.

[Kuba Jakubik <bighard@klub.eu.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hi list,

| How  to determine normal/peak rate of packets with SYN to my debian
box, for using this value
| in iptables limit match.
here you are:

- --- CUT ---
#!/bin/sh

TEMPFILE=`tempfile`
SCOREFILE="/tmp/scorefile"
MYHOST="10.0.0.254"

while [ 1 -eq 1 ]; do
DATE1=`date +%s`
tcpdump tcp[13]=0x2 and dst $MYHOST 2> /dev/null > $TEMPFILE &
sleep 10
killall tcpdump
DATE2=`date +%s`
NUMBER=`cat $TEMPFILE | wc -l`
echo "$DATE1 $DATE2 $NUMBER" >> $SCOREFILE
echo -n > $TEMPFILE
done

rm $TEMPFILE
- --- CUT ---

just change MYHOST to your ip and viola :)
then just suck the scorefile to some spreadsheet or just visually
analise it.

Greetings,

Kuba BIGHard Jakubik
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/qiWWYcNicAJN4x0RAlmdAKCjnRdkkGvMH1IH5B0s40Y9dvFjIACgvYSp
+GfEY0MQcUV9tHMpxZIfD0Y=
=ePJs
-----END PGP SIGNATURE-----