RE: [Full-Disclosure] Odd packet?

full-disclosure_at_nym.hush.com
Date: 05/28/04

  • Next message: Curt Purdy: "Re: [Full-Disclosure] Imaging Operating Systems" 
    To: full-disclosure@lists.netsys.com
Date: Fri, 28 May 2004 06:41:31 -0700

    >Unlikely. If this were the case, the server would reply with
    >RST, not RST, ACK. There's too little information to come to
    >any conclusion at this point.

    I have to correct myself, the server would reply with RST, ACK. Blaster.E
    (Skip Duckwall) looks like a more probable cause, but there is not enough
    information to be conclusive.

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Curt Purdy: "Re: [Full-Disclosure] Imaging Operating Systems"

    Relevant Pages

    • Re: TCP socket close problem
      ... use for the RST anymore - the seq number of those RSTs is taken from the ... acceptable by the server. ... probably most likely at the client end, ... Client asks for something that the server will send in 2 packets. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: RST.B .... can anyone shed some light?
      ... >> My name is Dave Rosendahl, and unfortunately it seems one of my ... > the SSH attacks by script kiddies a few months back. ... > The server that RST tries to contact is long gone, and it's easy to spot RST ...
      (comp.os.linux.security)
    • Re: TCP reset caused by socket.py
      ... seems that all POST requests to Trac's standalone server have ... chance the server will issue a TCP RST. ... A RST when you close a socket is OK. ... handling each request on its own thread. ...
      (comp.lang.python)
    • Re: Solution to Denial Of Service Attack
      ... >The only reason why a server would send more than one SYN/ACK in response ... >to a SYN is if it didn't receive an ACK or RST for the SYN/ACK, ... Texas Imperial Software | Try WFTPD, the Windows FTP Server. ... Fax/Voice +1258-9858 | read details of WFTPD Pro for NT. ...
      (comp.security.misc)
    • Re: Socket weirdness
      ... why RST is not set in the header of outgoing data if the server does a send after Receive is closed? ... Or why the server even lets you do a send after a Shutdown.Receive if ultimately it forces both sides of the client down anyway? ... Server cannot send RST on send after shutdown on its receive part because it would violate the TCP standard. ... The problem when you do Shutdown.Recv is what TCP stack should do when it receives data on this connection anyway? ...
      (microsoft.public.dotnet.framework)
    • Quantcast