On 11 Dec 2001, Matt Kowske wrote: > > Dec 11 00:35:50 bob kernel: New not syn:IN=eth1 OUT= > MAC=00:e0:29:22:10:80:00:06:2a:cf:ec:54:08:00 SRC=207.68.181.238 DST=<mi > ip> LEN=471 TOS=0x00 PREC=0x00 TTL=62 ID=53655 PROTO=TCP SPT=80 DPT=3299 > WINDOW=8760 RES=0x00 ACK PSH FIN URGP=0 > > I don't think these sites would be sending invalid TCP connection > attempts on purpose but I can't figure out what the reason would be. Things like this are sometimes caused by horked load balancers or layer 7 switching gear.. -- Peter Mills Tel: +44 (0)1737 xxxxxx Internet Ops Engineer URL: http://support.bbc.co.uk/ ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.
