nanog mailing list archives

Re: TCP receive window set to 0; DoS or not?


From: "Christopher L. Morrow" <christopher.morrow () verizonbusiness com>
Date: Fri, 08 Sep 2006 00:24:53 +0000 (GMT)



On Thu, 7 Sep 2006 billn () billn net wrote:


On Thu, 7 Sep 2006, Joshua Brewer wrote:

What about when we're seeing this on port 25?

Sand worms.

In all seriousness, your guess is as good as mine, at that point. If
memory serves, the platforms we saw this on most, with web browsers, were
mobile devices. What kind of volume are you seeing this in?

I see this on web, ftp, rsync as well... so perhaps it's just impolite
people? :)


Current thread: