Home page logo
/

educause logo Educause Security Discussion mailing list archives

Re: Data in SYN Packets
From: scott hollatz <shollatz () D UMN EDU>
Date: Mon, 26 Mar 2007 14:51:50 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

In our IPS log I see the following entry *TCP C2S Ambiguity: Data in
SYN Packet* daily directed towards our DNS server. These packets are
coming from four or so different addresses in China.  I did a brief
Google search with results being a few or more years old. A couple of
the posts reported the same *Data in SYN Packet* with the
originating addresses also from China.

Can anybody shed light on this?

Thank you very much.

Could be 3DNS software for measuring DNS response time to find quickest
response to web requests, ususally measured from several systems.

Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811

( mailto:n () css edu )


- --
scott hollatz                                        net shollatz () d UMn eDu
information technology systems and services          tel +1 218 726 8851
university of minnesota duluth mn usa                fax +1 218 726 7674
                                                                         --
                                              "Asn aD ta zlAp em uT zt33rg"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iD8DBQFGCCRa4og1WWfEVRsRAgKiAJ9f/A8s3zIFRKUduhry+/Pf/Ml+pACfSR6J
LoFFPH54COFpaMhTJkndEQo=
=mbgQ
-----END PGP SIGNATURE-----

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]