Basically what it does is when computers get a distributed denial of service virus (ddos) they start sending packets of information to a server or a machine. The machine must then answer the packets using up processing space and if too much space is used by the requests, if there are enough machines and the server doesn't have a connection limit to prevent these attacks then it will prevent legitimate traffic from using the server or machine.
See link for more details