{quote}
In this case, the server will open the connection and wait for the
complete header to be received. However, the client (the DoS tool)
will not send it and will instead keep sending bogus header lines
which will keep the connection allocated.
{quote}
http://isc.sans.org/diary.html?storyid=6601