[Intrusions] Data in a SYN Packet

[Coyle, Brian]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


- -----Original Message-----
From: intrusions-bounces at lists.sans.org
[mailto:intrusions-bounces at lists.sans.org]On Behalf Of sekure
Sent: Monday, June 21, 2004 09:35


> Has anyone noticed SYN packets to their DNS servers with 00 in the payload?

Yup - http://cert.uni-stuttgart.de/archive/intrusions/2002/09/msg00123.html


- -- Brian Coyle, GCIA

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)

iD8DBQFA1usFHJszdJS2eksRAsziAJ9RIiwRmgFmsF+7VXxPuP8Jc1DxTwCfYQnZ
CUE+W/R7PnIW5XnN5p0K8yA=
=0O4i
-----END PGP SIGNATURE-----