RE: Type of Attack Vector

Hi, Jono29...

Is your awareness of the attack vector based on an alert generated by an
IDS/IPS/something else? If so, can you indicate which IDS/IPS/whatever
generated that alert, and whether that device/software has any help
information available for that alert type? Sometimes different vendors
have interesting names for rather mundane variations on a known theme.

Cheers

_____________________________
J o h a n n v a n D u y n


-----Original Message-----
From: jono29@xxxxxxxxx [mailto:jono29@xxxxxxxxx]
Sent: Wednesday, January 25, 2006 3:11 PM
To: focus-ids@xxxxxxxxxxxxxxxxx
Subject: Type of Attack Vector

Hi List,

I have recently come across a type of attack vector named "Fast Repeat
Ack". Having searched through various sources of information such as
MySDN and MSDN I have been unable to find anything specific to this
vector, although I have found alot of info on the other connection
orientated attacks such as Syn Flood and Half Open Syn.
Any information will be greatly received, and any links to useful
sources appreciated.

Thanks for your time,

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------

Relevant Pages

  • RE: session logging IDS
    ... > HTH! ... when the alert was triggered somewhere in the ... > Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • Re: Wireless IDS
    ... centrally-managed distributed sensor APs that will detect and alert on ... > with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)