#!/bin/bash
#
# Peek on the outside of the firewall to see if SYN flood is still ongoing
if [[ $(id -u) -ne 0 ]]; then
	echo "Must be run as root"
	exit 1
fi
tcpdump -n "tcp[tcpflags] & (tcp-syn) != 0"