[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: TCP windows shrinking



Previously Noah L. Meyerhans wrote:
> The IP address, obviously, has been replaced with x's here.  I haven't
> ever seen the message before.

You should never get one.

> Might this be an attempt at something like that?  Might this merely have been
> a packet that got horribly mangled somewhere on the internet, completely
> unintentionally?

Unlikely, it would have failed on a checksum check then. It looks like
a really silly DoS attack by trying to cause resource starvation by
using extremely large TCP windows.

Wichert.

-- 
   ________________________________________________________________
 / Generally uninteresting signature - ignore at your convenience  \
| wichert@cistron.nl                  http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |



Reply to: