OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Kim, Anthony (anthony.kimvw.com)
Date: Fri Jul 13 2001 - 11:07:02 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    I have a question which I hope is appropriate for this forum.

    What is the criteria used to trigger RealSecure's TCP_Hijacking_Tool Network
    Event? I see several per week on the console typically during application
    layer encrypted sessions (Oracle ANO; HTTPS) but then today RS logged the
    event for an HTTP session. I had assumed the signature was related to TCP
    sequence numbers but can't find detailed information.