TCP: S2C Old Packet Old Timestamp in 3WH SYNACK

This protocol anomaly triggers when it detects a SYN-ACK packet with a timestamp that is older than a previously recorded timestamp (as specified by RFC1323). Because these ambiguous packets can be interpreted by the receiving host in different, unpredictable ways, it is recommended to drop them.

Short Name
TCP:AUDIT:OLD-SYNACK
Severity
Info
Recommended
False
Recommended Action
None
Category
TCP
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?