저희주소는 xxx.xxx.xxx.xxx로 표시했습니다. 포트를 바꾸어가면서 작업을 하는군요. 어떤현상인지요? tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4589 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4590 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4591 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4592 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4593 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4589 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4590 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4591 SYN_RE CV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4592 SY N_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4593 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4594 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4595 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1: 4596 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168. 0.1:4597 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192. 168.0.1:4598 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4599 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4600 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4601 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xx x:80 192.168.0.1:4602 SYN_RECV - tcp 0 0 xxx.xxx.xx x.xxx:80 192.168.0.1:4603 SYN_RECV - tcp 0 0 xxx.xx x.xxx.xxx:80 192.168.0.1:4604 SYN_RECV - tcp 0 0 xx x.xxx.xxx.xxx:80 192.168.0.1:4605 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4606 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4607 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4608 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4609 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4610 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4613 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4614 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4615 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4618 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4619 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4620 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4621 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4622 SYN_RECV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4624 SYN_RE CV - tcp 0 0 xxx.xxx.xxx.xxx:80 192.168.0.1:4623 SY N_RECV -
같은 포트에 SYN_RECV 가 계속 쌓이는 것은 SYN 플러딩이나 대량 접속 시도일 수 있습니다. netstat 의 출력이 여러 포트로 늘어나는 것은 같은 IP 가 많은 연결을 시도하는 것이니 해당 IP 를 방화벽에서 막고, 연결 수를 제한하는 설정을 추가하세요. SYN cookies 를 켜는 것도 도움이 됩니다.
![[TOP]](/images/color///top.gif){kind=small}
명좀...
RE: netstat -na하면 반복이 되는부분이 있는데 이부분 설명좀... 
![[ 적수네 동네 ]](/images/button/lsn.gif){kind=small}
![[ 리눅스 상표권 독점 반대 ]](/images/button/savelinux.gif){kind=small}
![[ 한글 리눅스 문서 프로젝트 ]](/images/button/kldp1.gif){kind=small}
![[ KrLine ]](/images/button/linux01.gif){kind=small}
![[ 사랑넷 ]](/images/button/sarangnet.jpg){kind=small}
![[ Valid HTML 4.0! ]](/images/button/w3.gif){kind=small}
![[ SlashDot ]](/images/button/slashbutton.gif){kind=small}
![[ Freshmeat ]](/images/button/freshmeat.gif){kind=small}