Full Disclosure mailing list archives

SYN ACK scans to random ports


From: silence_is_best () hushmail com
Date: Tue, 24 Sep 2013 06:49:56 -0600

Can someone explain the point of a SYN ACK scan to random high ports? 
I usually see a fair amount of these...at first I thought it was maybe
a block to an initiating SYN packet, but I don't see any evidence that
the SYN ACK isn't the first packet seen.  Danke. 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: