Signature Detail
Short Name |
TCP:AUDIT:S2C-FINRETR-BADSEQ |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
TCP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TCP: S2C Ambiguity Mismatching Seq Num in FIN Retrans
This protocol anomaly triggers when it detects a TCP FIN retransmission in which the retransmitted SEQUENCE number does not match the SEQUENCE number of the original FIN. Because it is unknown if the server has received the first FIN, IDP cannot determine when the flow ends.
Extended Description
None
References