> > 先日のﾛｸﾞだと秒間に140回ほどﾘﾄﾗｲしてたけど。(;´ω`)なんかﾐｽってないか
> > こんな感じで300行ほどﾛｸﾞに残ってたけどNAT溢れる感じだな
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:24:59
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:24:38
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:24:16
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:23:55
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:23:33
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:23:12
> > [DoS attack: TCP SYN Flood] attack packets in last 20 sec from ip [*.*.*.*], Thursday, Oct 01,2015 23:22:51
> > [LAN access from remote] from *.*.*.*:4939 to 192.168.100.35:8080, Thursday, Oct 01,2015 23:22:51
> > [LAN access from remote] from *.*.*.*:4938 to 192.168.100.35:8080, Thursday, Oct 01,2015 23:22:51
> > [LAN access from remote] from *.*.*.*:4937 to 192.168.100.35:8080, Thursday, Oct 01,2015 23:22:51
> > [LAN access from remote] from *.*.*.*:4901 to 192.168.100.35:8080, Thursday, Oct 01,2015 23:22:51
> 秒だけ見るとほぼ等間隔だから(;´Д`)単純にﾊﾟｹｯﾄがまだ来てるからﾛｸﾞの行増やしたんじゃないかな
> そもそもSYNに対してREJECTもACK返さなかったら再送されるんじゃ

上の方が等間隔なのはﾙｰﾀがDoSと認識してﾌﾞﾛｯｸし続けたって意味。(;´ω`)
転送詰まってSYNにREJECT返せないまま次の番号でﾘﾄﾗｲしてる間隔と回数が極端でさらに転送詰まって
みたいな感じになってるかな
ﾛｸﾞがこんなので見た方が早いけど後で消します

http://misao.on.arena.ne.jp/c/up/misao101180.txt

参考：2015/10/06(火)01時12分34秒