Security Incidents mailing list archives

Another odd scan...

From: Adam Young <adam () vbfx com>
Date: Thu, 11 Jul 2002 21:56:35 -0400

--SNIP--
Jul 11 21:52:48 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=80.97.2.93 DST=24.215.x.y LEN=60 TOS=0x00 PREC=0x00 TTL=34 ID=64252
DF PROTO=TCP SPT=33124 DPT=77 WINDOW=5840 RES=0x00 CWR ECE SYN URGP=0 
--SNIP--

        I got this for about 2 minutes, every 20 seconds or so, I just thought
it especially weird with "CWR ECE SYN", looking as to what the meaning
of this is.

        Any help is appreciated greatly,

                Adam

Attachment: _bin
Description:

Current thread:

Another odd scan... Adam Young (Jul 12)
- Re: Another odd scan... Jose Nazario (Jul 12)
- <Possible follow-ups>
- RE: Another odd scan... Wolf, Glenn (Jul 12)
- Re: Another odd scan... Muhammad Faisal Rauf Danka (Jul 13)