TCP: C2S Ambiguity Mismatching TS Opt in SYN Retrans

This protocol anomaly triggers when it detects a TCP SYN retransmission where the TIMESTAMP option did not match the one that was specified with the original SYN. IDP cannot tell the initial TIMESTAMP, as it is unknown whether the server has received the first SYN.

Short Name
TCP:AUDIT:SYN-RTNS-BADTS
Severity
Info
Recommended
False
Recommended Action
None
Category
TCP
Release Date
08/27/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?