Re: multiple port tries

["M. Dodge Mumford" <dodge () nfr net>]

You don't mention whether it's TCP or UDP. If it's TCP, look for
client-side data. If there isn't any, it may be an attempt at a SYN flood.

On Mon, 24 May 1999, Neil Ratzlaff wrote:

> What is the point of hitting the same machine many times on the same port?
> Multiple telnet attempts I can understand as trying passwords, but what
> could someone gain by trying sunrpc or listen many times?  Whether checking
> for an open port or actually trying an exploit, what can someone gain by
> trying the same thing several times a minute?
>
> Neil


Dodge