Security Incidents mailing list archives
Re: SYN Flood attack with sequential destination ports?
From: Joerg Over <over () dexia de>
Date: Thu, 08 Nov 2001 20:08:50 +0100
Hi! At 12:55 08.11.01 -0500 you wrote: ->The interesting characteristic is the destination port is sequential - each ->phase of attack starting at 3039 and ending arouind 34431. --8<------------------------------------------------------------------------ Ever thought it could be a syn scan instead of a syn flood? :) Greetings, jo +-------------------------------------------------------------------+ | __ __ __ __ _ _ It ain't over 'till it's Joerg Over... | | / _ \ V / -_) '_/ | | \___/\_/\___|_| | +-------------------------------------------------------------------+ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- SYN Flood attack with sequential destination ports? Joshua Wright (Nov 08)
- Re: SYN Flood attack with sequential destination ports? Jason Giglio (Nov 08)
- Re: SYN Flood attack with sequential destination ports? Joerg Over (Nov 09)
- <Possible follow-ups>
- RE: SYN Flood attack with sequential destination ports? Joshua Wright (Nov 09)