General discussion

Locked

TCP SYN RES SET what does this mean

By gillettuser ·
I am getting a security alert from my firewall about twice a day that looks like:
2003-05-01 08:35:01 - TCP SYN RES SET - Source:209.47.197.15,40192,WAN -
Destination:<<my ip address>>,25,LAN

The firewall is a Netgear FM114P

I am running ansmtp server at this address and it seems to be working fine.

My question is: What does this message mean?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Check the site out!

by areets In reply to TCP SYN RES SET what does ...

Navigate to http://users.pandora.be/areets/wlj/default.html

Go to Tech Groove Room
Click Support on ?pullout? menu (left)
Click on Knowledge Place

TSP

Collapse -

Weird TCP Traffic...

by vze393zf In reply to TCP SYN RES SET what does ...

http://archives.neohapsis.com/archives/incidents/2002-01/0103.html

Check out the discussion that these guys are having at the site link above. My suggestion...download SNORT IDS, or something capable of doing what it does, and let the IDS tell you what the traffic is associated with (Hacks, etc.). Nothing beats a good NIDS.

Pete

Back to Security Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums