[Bro] A strange connection
Balasubramaniam Natarajan
bala150985 at gmail.com
Sun Jan 25 06:40:52 PST 2015
On Sun, Jan 25, 2015 at 6:12 PM, Po-Ching Lin <pachinko.tw at gmail.com> wrote:
>
> 1419498119.991707 CLQP0QdahFaFha0U2 140.x.x.x 58967
> 66.171.248.x 80 tcp http 253.220343 114502461 592490922
> *SF* T 114502154
> ShADadfF 5 519 6 578 (empty)
>
> Po-Ching
>
>
Is this by any chance a SF scan ? If this were a normal connection won't
we be seeing an Ack Flag, Push Flag in addition to the SF noted above ?
--
Regards,
Balasubramaniam Natarajan
http://blog.etutorshop.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150125/ec509b38/attachment.html
More information about the Bro
mailing list