Hello, This morning I've read the following in my snort.alert log: [**] [116:46:1] (snort_decoder) WARNING: TCP Data Offset is less than 5! [**] 11/13-21:21:31.736604 200.207.87.24:0 -> 80.84.232.115:0 TCP TTL:117 TOS:0x0 ID:19244 IpLen:20 DgmLen:40 *******F Seq: 0x3A6D74 Ack: 0x1000010 Win: 0x0 TcpLen: 0 I don't know what this means however... Specially the ports seam strange to me. Any help would be appreciated! Thanks in advance, Kristof Goossens -- Digital fingerprint: F56F F987 0E0C AFF8 0B6D 7CA1 F152 E07D 72AF 337B
Attachment:
pgpdDkQXZBu8C.pgp
Description: PGP signature