Data in SYN Packets

[Mike Hanson <MHanson () CSS EDU>]

Hello,

In our IPS log I see the following entry *TCP C2S Ambiguity: Data in
SYN Packet* daily directed towards our DNS server. These packets are
coming from four or so different addresses in China.  I did a brief
Google search with results being a few or more years old. A couple of
the posts reported the same *Data in SYN Packet* with the
originating addresses also from China.

Can anybody shed light on this?

Thank you very much.




Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811

 ( mailto:n () css edu )