TCP: Options Error WSF In Non-SYN Packet
This protocol anomaly triggers when it detects a WSF (Window Scale Factor) option in a non-SYN packet. WSF should appear only in SYN packets. It is recommended to drop these packets.
Extended Description
TCP packets in which the WSF field is included, and no SYN flag is set, constitute a protocol anomaly. This condition could be the result of a network configuration error. It could also indicate that a denial of service attack involving the injection of malformed TCP/IP datagrams is being attempted.
References
Short Name
TCP:OPTERR:NONSYN-WSF
Severity
Info
Recommended
False
Recommended Action
None
Category
TCP
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown