Only giving upvote if all parts are completed:

4-1 Task description (30 pts)

In this task, you will launch SYN flooding attacks against port 22 of the Server VM with SYN cookie on and off, respectively and observe the behavior of the server.

For each experiment, use the netwox tool and write your observation. How did the server behave in each attack in terms of the service and the status of the SYN queue? Was the client able to connect to the server?

4-2 Relevant commands

$sysctl q net.ipv4.tcp_max_syn_backlog

$sudo sysctl a | grep net.core.somaxconn

$sudo sysctl a | grep syncookies

$sudo sysctl w net.ipv4.tcp_syncookies=value

$sudo netwox 76 t target_ip p target_port

$netstat tna

$netstat tna | grep SYN_RECV