Signature Detail
Short Name |
TCP:AMBIGUOUS:WSF-TOOBIG |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
TCP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TCP: Options Error WSF Too Big
This protocol anomaly triggers when it detects a WSF (Window Scale Factor) option with a specified value that is bigger than the valid limit (14). Because these ambiguous packets can be interpreted by the receiving TCP stack in different, unpredictable ways, it is recommended to drop them.
Extended Description
TCP packets in which the WSF option value exceeds 14 constitute a protocol anomaly. This condition could be the result of a network configuration error. It could also indicate a denial of service attack attempt involving the injection of malformed TCP/IP datagrams.
References