in reply to Re^6: SYN attack detection code
in thread SYN attack detection code

You could start by doing a search.

The first plain web page (3rd one down) gives a couple of ways to detect syn floods.

Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
"Science is about questioning the status quo. Questioning authority".
In the absence of evidence, opinion is indistinguishable from prejudice.

In Section Seekers of Perl Wisdom