Sessions problem

[TerickJojo]

SYN scan will hold too many sessions with full port scan so that the firewall gateway's CPU overload.

[v-byte-cpu]

Hi @TerickJojo can you please provide more details and full cli command that you invoke. If the firewall cannot handle the packet load, you can use the rate limit cli option --rate

[TerickJojo]

Hi @TerickJojo can you please provide more details and full cli command that you invoke. If the firewall cannot handle the packet load, you can use the rate limit cli option --rate

six arp x.x.x.x/24 --json | tee x.cache && cat x.cache | six tcp syn x.x.x.x/24 -p 1-65535 --json
That's the command. I hope sx could run at full speed so I don't use the rate-limiting .