Hello, This morning I've read the following in my snort.alert log:
[**] [116:46:1] (snort_decoder) WARNING: TCP Data Offset is less than 5! [**]
11/13-21:21:31.736604 200.207.87.24:0 -> 80.84.232.115:0
TCP TTL:117 TOS:0x0 ID:19244 IpLen:20 DgmLen:40
*******F Seq: 0x3A6D74 Ack: 0x1000010 Win: 0x0 TcpLen: 0
I don't know what this means however... Specially the ports seam strange to me.
Any help would be appreciated!
Thanks in advance,
Kristof Goossens
--
Digital fingerprint: F56F F987 0E0C AFF8 0B6D 7CA1 F152 E07D 72AF 337B
msg07728/pgp00000.pgp
Description: PGP signature
