Re: Re: Re: Tons of Source port 80 to random Dest Port Traffic

There could be a possibilty that those "n" machines are initiating the connections by hitting your source machine on port 80 with "SYN" packets. So in response, the source machine is replying to all these destination machines with a "SYN ACK" from port 80. Now since a Single Source is generating a huge traffic, you are observing it, how about you check it in the other way round???