Re: to capture illegal TCP flags
From: Casper H.S. Dik (Casper.Dik_at_Sun.COM)
Date: 01/14/04
- Previous message: Thor Kottelin: "Re: Looking for motion sensor"
- In reply to: sponge: "Re: to capture illegal TCP flags"
- Next in thread: sponge: "Re: to capture illegal TCP flags"
- Reply: sponge: "Re: to capture illegal TCP flags"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 14 Jan 2004 20:17:49 GMT
yosponge@yahoo.com (sponge) writes:
>'Illegal TCP flags' may refer either to reserved flags being set in
>the TCP flag portion of a TCP header (older OS' and firewalls may not
>recognize ECN, for instance), or a combination considered invalid by
>the TCP stack (e.g. FIN/URG).
Why is FIN/URG invalid? Since you can send data with the FIN,
I'd imagine that data could be urgent.
Casper
-- Expressed in this posting are my opinions. They are in no way related to opinions held by my employer, Sun Microsystems. Statements on Sun products included here are not gospel and may be fiction rather than truth.
- Previous message: Thor Kottelin: "Re: Looking for motion sensor"
- In reply to: sponge: "Re: to capture illegal TCP flags"
- Next in thread: sponge: "Re: to capture illegal TCP flags"
- Reply: sponge: "Re: to capture illegal TCP flags"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]