Monitors the rate of TCP SYN packets received on a connection that is in the SYN_RCVD state.
This monitor checks the rate of TCP SYN packets received on a connection that is in the SYN_RCVD state.
A connection goes into the SYN_RCVD state after receiving a SYN packet.
This monitor is disabled by default.
The following configuration parameters are customizable:
IntervalSeconds - The recurring interval of time in seconds in which to run the script (the default value is set to 300 seconds).
SyncTime - The synchronization time specified by using a 24-hour format. No default value specified.
CacheExpirationFactor - Cache expiration factor. Default value is 1.0.
Debug - When true writes more info in events log. Default value is false.
Threshold - Total number of TCP SYN packets received. Default value is 1000.
Direction - GreaterEqual, Greater, Equal, Less, LessEqual. Default value is GreaterEqual.
|Alert Auto Resolve