README.md aktualisiert
This commit is contained in:
parent
58a5ff2cdf
commit
6866d54747
@ -1,6 +1,6 @@
|
||||
# TCP lengths and flags
|
||||
|
||||
| Flag Combination | Flags Set (Hex) | Purpose | IP+TCP Payload Size | Ethernet Frame Size | XDP Filtering Logic |
|
||||
| Flag Combination | Flags Set (Hex) | Purpose | IP+TCP Payload Size | Ethernet Frame Size (what XDP will see) | XDP Filtering Logic |
|
||||
|------------------|-----------------|---------|---------------------|---------------------|---------------------|
|
||||
| SYN | 0x02 | Initiates connection | 40–59 bytes | 64–77 bytes | Rate limit SYN packets per source IP to prevent floods. Drop if rate exceeds threshold. SynProxy |
|
||||
| SYN-ACK | 0x12 | Acknowledges SYN | 40–59 bytes | 64–77 bytes | Validate against recent SYN requests using eBPF maps. Drop if no matching SYN. |
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user