I am very surprised at Code monkey could identify the source of synflood attack.
How did you do that?
BTW, do you know synflood is an attack to send SYN packets with modified source address and/or port.
So basically it is impossible to identify the source of synflood unless sniffering attackers router/gateway.