Re: Data in SYN Packets

[scott hollatz <shollatz () D UMN EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Hello,
>
> In our IPS log I see the following entry *TCP C2S Ambiguity: Data in
> SYN Packet* daily directed towards our DNS server. These packets are
> coming from four or so different addresses in China.  I did a brief
> Google search with results being a few or more years old. A couple of
> the posts reported the same *Data in SYN Packet* with the
> originating addresses also from China.
>
> Can anybody shed light on this?
>
> Thank you very much.

Could be 3DNS software for measuring DNS response time to find quickest
response to web requests, ususally measured from several systems.

> Mike Hanson
> Network Security Manager
> The College of St. Scholastica
> Duluth, MN 55811
>
> ( mailto:n () css edu )

- --
scott hollatz                                        net shollatz () d UMn eDu
information technology systems and services          tel +1 218 726 8851
university of minnesota duluth mn usa                fax +1 218 726 7674
                                                                         --
                                              "Asn aD ta zlAp em uT zt33rg"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iD8DBQFGCCRa4og1WWfEVRsRAgKiAJ9f/A8s3zIFRKUduhry+/Pf/Ml+pACfSR6J
LoFFPH54COFpaMhTJkndEQo=
=mbgQ
-----END PGP SIGNATURE-----