How can Flow Analytics help me detect DDos attacks?

[Gonzo]

The SYN Violations algorithm monitors the TCP flag responses by a destination host. More specifically, any SYN TCP flag responses.
If a server is being saturated with connection requests, it will start to deny these connections and return a SYN flag response.
If you start to notice excessive amounts of SYN violations, it can be a clue to a possible DDoS attack.

[tomp]

Check out this article: Denial of Service Methods for Dummies

It will answer most questions you have about denial of service.

-Tom

[Fazer_123]

Thanks for your help.