syncache little cache just for half-open streams those that only saw a SYN so far lightweight memory, but also caches and memory bandwidth PCB only allocated upon completion of the 3WHS fewer ressources, attack much harder