Security Incidents mailing list archives

Suspect short first fragment?

From: <jamie () jamie-sue org>
Date: 28 Feb 2002 17:57:09 -0000



I got several of these messages in my syslogd logs - 
I'm using Redhat 7.1 
              
             any idea?  Is this an attack? 
              
             Suspect short first fragment.  
             eth0 PROTO=17 212.15.64.83:0 
200.186.111.146:0 L=20 S=0x00 I=40960 F=0x4000 
T=116 
             (#0)  

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Suspect short first fragment? jamie (Feb 28)
- <Possible follow-ups>
- RE: Suspect short first fragment? Ralph Los (Feb 28)
- RE: Suspect short first fragment? Boyan Krosnov (Feb 28)