Educause Security Discussion
mailing list archives
Data in SYN Packets
From: Mike Hanson <MHanson () CSS EDU>
Date: Mon, 26 Mar 2007 14:24:39 -0500
In our IPS log I see the following entry *TCP C2S Ambiguity: Data in
SYN Packet* daily directed towards our DNS server. These packets are
coming from four or so different addresses in China. I did a brief
Google search with results being a few or more years old. A couple of
the posts reported the same *Data in SYN Packet* with the
originating addresses also from China.
Can anybody shed light on this?
Thank you very much.
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811
( mailto:n () css edu )
- Data in SYN Packets Mike Hanson (Mar 26)