Security Incidents mailing list archives

strange log


From: Emilio Casbas <ecasbas () unav es>
Date: Thu, 22 Apr 2004 13:59:48 +0200

Hi,

We've seen in the firewall's log of transparent proxy this messege from different ips repeteadly :

Apr 21 21:28:55 moria kernel: TCP: Treason uncloaked! Peer external_ip/80 shrinks window 1466359669:1466360884. Repaired.

We've googling, but we dont know if is an attack or a bad negotiation.
Any suggestion?

Thanks
Emilio C.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Current thread: