Daniel.Ramaswamicelera.com
Date: Thu Aug 26 2004 - 14:00:28 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello,

Has anyone had any detects similar to below? Is this a form of fingerprint
(this being a fingerprint response? Any insight into what the last TCP
option
fields may be? I have seen interesting traffic like this before, but have
not found any text that could explain it.

Any help appreciated.

09:27:21.621476 xxx.xxx.xxx.xxx.http > xxx.xxx.xxx.xxx.46045: . ack
3207692596 win 8688 <nop,nop,sackOK,[bad opt]> (DF)
                         4500 0034 e1a2 4000 3e06 b453 xxxx xxxx
                         xxxx xxxx 0050 b3dd d43c c6f2 bf31 8134
                         8010 21f0 980d 0000 0101 0402 4c66 7844
                         0278 c313

Thanks,
Dan

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]