RE: TCP/IP reference [WAS: UDP packets from Apache ? New DDOS ?]

["Strand, John" <John.Strand () mms gov>]

As usual thanks for all of your input.

I believe that the TCP/IP Illustrated book is the way I am going to go. I
have been using the SANS reference for a while but it doesn't have
everything. And I want to wean myself form ethereal dependence.


Thanks again,

John

-----Original Message-----
From: Coyle, Brian [mailto:Brian.Coyle () disney com] 
Sent: Thursday, July 08, 2004 12:06 PM
To: Strand, John
Cc: incidents () securityfocus com
Subject: TCP/IP reference [WAS: UDP packets from Apache ? New DDOS ?]


From: Strand, John [mailto:John.Strand () mms gov]
> Does any one happen to know of a reference (online or otherwise) which
> breaks down the possible options for each TCP/IP header field?

http://www.sans.org/resources/tcpip.pdf


                                    -- Brian, GCIA