|
Please explain:
Scenario:
Source of 123 is sending normal traffic to destination 321. Destination (321) is busy, therefore, can't acknowledge source (123). RealSecure sees This occurring several times then responds with a SYN Flood but logs it as SPOOFED coming from destination (000).
Questions: 1) Why does ISS RealSecure call this event "SPOOFED"?
2) Shouldn't RS recognize that the IP is known even if messages are not being acknowledged?
Louis K. Hutson, Jr. CNO-TOC, Deputy, AS&W DSN: 235-1150/1286 COM: (703) 706-1150
|
