synfloods tcp server: stack allocates PCB and updates hash table for each SYN firewall allocates a state table entry for each similiar for anything that tracks flows eventually hitting limits