Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: port 0 scanningLamont Granquist (lamontgHITL.WASHINGTON.EDU)
Thu, 9 Jul 1998 19:20:32 -0700
- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Mike Sorsen: "Sun libnsl patches"
- Previous message: Scott Stubbs: "Re: Sun libnsl lameness"
- In reply to: Lamont Granquist: "port 0 scanning"
- Next in thread: Dagmar d'Surreal: "Re: port 0 scanning"
-----BEGIN PGP SIGNED MESSAGE----- As a followup to this, I've been informed by two people now[*] that Linux boxes will respond to SYN|FIN with a SYN|FIN|ACK on an open port. Therefore this probably indicates that the SYN|FIN packets were not only an attempt to get past poorly designed firewalls, but probably an attempt to ID the system being probed as a Linux box as well. [*] Solar Designer and John McDonald - -- Lamont Granquist <lamontghitl.washington.edu> (206)616-1469 fax:(206)543-5380 Human Interface Technology Lab. University of Washington. Seattle, WA PGP pubkey: finger -l lamontghitl.washington.edu | pgp -fka -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNaV6dCGfPhFbK8mBAQG6owP9E/2Grcjna9BYVnWbcAM4jZ0S8I3Xlv3z et4JcGE1LOE7667txRUdoBFBGT8nveZKT30mKUUrdrpXTSkVjqIV0lmH0o+1UnZm dRea+7KQveosZjZQlzu6ndAMDB/lfUhSNiFOy4E18Vnrs8HNlxxwS4UJoCUYYpLg /HqcjFNaexs= =5RnL -----END PGP SIGNATURE-----