TCP receive window set to 0; DoS or not?

Christopher L. Morrow christopher.morrow at verizonbusiness.com
Fri Sep 8 00:24:53 UTC 2006



On Thu, 7 Sep 2006 billn at billn.net wrote:

>
> On Thu, 7 Sep 2006, Joshua Brewer wrote:
>
> > What about when we're seeing this on port 25?
>
> Sand worms.
>
> In all seriousness, your guess is as good as mine, at that point. If
> memory serves, the platforms we saw this on most, with web browsers, were
> mobile devices. What kind of volume are you seeing this in?

I see this on web, ftp, rsync as well... so perhaps it's just impolite
people? :)



More information about the NANOG mailing list