TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
RS 6.5 is reporting in several places unusual TCP flags. If my math is right, we're seeing frequent packets with FIN-RST-ACK or FIN-PSH-RST-ACK set, almost always to a POP server or SMTP server. Would this traffic be legitimate? We don't see it to other ports, so I don't think it's a scan, though I guess it could be OS fingerprinting. -- Kyle Maxwell InfoSec Engineer Global Security Operations Center Verizon International Security [EMAIL PROTECTED]
