Fin - no - Ack
Donald.Smith at qwest.com
Wed Feb 25 18:42:42 GMT 2004
Just the fin (no syn?).
SYN/FIN scanning works in some os'es and can pass weak filters.
Donald.Smith at qwest.com GCIA
Good luck favors the well prepared. Bad luck favors the poorly prepared.
> -----Original Message-----
> From: Fred Portnoy [mailto:fportnoy at mail.plymouth.edu]
> Sent: Wednesday, February 25, 2004 11:30 AM
> To: intrusion at sans.org; unisog at sans.org
> Subject: Fin - no - Ack
> Since around 9am today I am seeing high rates of scans coming
> from my ResNet
> with the FIN bit set but no ACK bit. Does this sound familiar
> to anyone?
More information about the unisog