Signature Detail
Short Name |
TCP:OPTERR:NONSYN-WSF |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
TCP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TCP: Options Error WSF In Non-SYN Packet
This protocol anomaly triggers when it detects a WSF (Window Scale Factor) option in a non-SYN packet. WSF should appear only in SYN packets. It is recommended to drop these packets.
Extended Description
TCP packets in which the WSF field is included, and no SYN flag is set, constitute a protocol anomaly. This condition could be the result of a network configuration error. It could also indicate that a denial of service attack involving the injection of malformed TCP/IP datagrams is being attempted.
References