[Bro] A strange connection

Balasubramaniam Natarajan bala150985 at gmail.com
Sun Jan 25 06:40:52 PST 2015


On Sun, Jan 25, 2015 at 6:12 PM, Po-Ching Lin <pachinko.tw at gmail.com> wrote:

>
> 1419498119.991707       CLQP0QdahFaFha0U2       140.x.x.x  58967
> 66.171.248.x  80      tcp   http     253.220343      114502461 592490922
>    *SF*      T       114502154
> ShADadfF 5       519     6       578     (empty)
>
> Po-Ching
>
>
Is this by any chance a SF scan ?  If this were a normal connection won't
we be seeing an Ack Flag, Push Flag in addition to the SF noted above ?

-- 
Regards,
Balasubramaniam Natarajan
http://blog.etutorshop.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150125/ec509b38/attachment.html 


More information about the Bro mailing list