Signature Detail
Short Name |
TCP:AUDIT:OLD-SYNACK |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
TCP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TCP: S2C Old Packet Old Timestamp in 3WH SYNACK
This protocol anomaly triggers when it detects a SYN-ACK packet with a timestamp that is older than a previously recorded timestamp (as specified by RFC1323). Because these ambiguous packets can be interpreted by the receiving host in different, unpredictable ways, it is recommended to drop them.
Extended Description
None
References