synfloods


attacker sends a lot of SYNs

server allocates PCB and updates hash table for each

firewall allocates a state table entry for each
similiar for anything that tracks flows

eventually hitting limits