Re: Protocol Violation

[Radu Brumariu <brumarir () MSCI MEMPHIS EDU>]

On Fri, 17 Nov 2000, JD Conley wrote:

> Hello,

Hi,

I might be wrong , but it looks to me that this is an FIN scanning.

Best of luck,
Radu

> 11/17/00, 11:23:35, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:23:36, x.x.x.x, y.y.y.y, Tcp, 8289, 28281, FIN SYN ACK URG ,
> Frag, Dialout, -, -,
> 11/17/00, 11:23:40, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:23:50, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:24:11, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:24:52, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:26:13, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,
> 11/17/00, 11:28:13, x.x.x.x, y.y.y.y, Tcp, 25970, 29305, FIN RST PSH , Frag,
> Dialout, -, -,

/******************************************************************/

You know you've been hacking too long ...
...when you want coffee you :

finger waiter
cat *coffee*|grep -v decaf|drink|more

/*****************************************************************/