Home page logo

educause logo Educause Security Discussion mailing list archives

Data in SYN Packets
From: Mike Hanson <MHanson () CSS EDU>
Date: Mon, 26 Mar 2007 14:24:39 -0500


In our IPS log I see the following entry *TCP C2S Ambiguity: Data in
SYN Packet* daily directed towards our DNS server. These packets are
coming from four or so different addresses in China.  I did a brief
Google search with results being a few or more years old. A couple of
the posts reported the same *Data in SYN Packet* with the
originating addresses also from China.

Can anybody shed light on this?

Thank you very much.

Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811

 ( mailto:n () css edu )

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]