Re: Gratuitous syn/ack

2010-11-11 Thread Randy
--- On Thu, 11/11/10, Joel Esler wrote: > From: Joel Esler > Subject: Re: Gratuitous syn/ack > To: "Pete Carah" > Cc: "nanog@nanog.org" > Date: Thursday, November 11, 2010, 5:03 PM > I am betting backscatter.  > > > Sent from my iPhone >

Re: Gratuitous syn/ack

2010-11-11 Thread Joel Esler
I am betting backscatter. Sent from my iPhone On Nov 11, 2010, at 5:31 PM, Pete Carah wrote: > I'm seeing a significant number (about 1/minute 24 hr/day) of syn/ack > packets coming from port 80 of random addresses to random ports on my > nameserver and a few other systems. This isn't enoug

Gratuitous syn/ack

2010-11-11 Thread Pete Carah
I'm seeing a significant number (about 1/minute 24 hr/day) of syn/ack packets coming from port 80 of random addresses to random ports on my nameserver and a few other systems. This isn't enough traffic to be really annoying, but is curious. I wonder if the simple explanation (backscatter from syn