v-byte-cpu/sx

Sessions problem

TerickJojo opened this issue · 2 comments

TerickJojo commented

SYN scan will hold too many sessions with full port scan so that the firewall gateway's CPU overload.

v-byte-cpu commented

Hi @TerickJojo can you please provide more details and full cli command that you invoke. If the firewall cannot handle the packet load, you can use the rate limit cli option --rate

TerickJojo commented

Hi @TerickJojo can you please provide more details and full cli command that you invoke. If the firewall cannot handle the packet load, you can use the rate limit cli option --rate

six arp x.x.x.x/24 --json | tee x.cache && cat x.cache | six tcp syn x.x.x.x/24 -p 1-65535 --json
That's the command. I hope sx could run at full speed so I don't use the rate-limiting .