What are some common DDoS attack types, and how are they reflected in PCAP files?

Common DDoS attack types include UDP floods (high volume UDP packets), SYN floods (exhausting server resources through SYN packets), HTTP floods (excessive HTTP requests), and application-layer attacks. In a PCAP file, these attacks manifest as unusually high packet rates, SYN flood packets with many SYN-ACK responses, large numbers of HTTP requests, or specific application-layer traffic patterns.