TCP receive window set to 0; DoS or not?

Christopher L. Morrow christopher.morrow at
Fri Sep 8 00:24:53 UTC 2006

On Thu, 7 Sep 2006 billn at wrote:

> On Thu, 7 Sep 2006, Joshua Brewer wrote:
> > What about when we're seeing this on port 25?
> Sand worms.
> In all seriousness, your guess is as good as mine, at that point. If
> memory serves, the platforms we saw this on most, with web browsers, were
> mobile devices. What kind of volume are you seeing this in?

I see this on web, ftp, rsync as well... so perhaps it's just impolite
people? :)

More information about the NANOG mailing list