Re: Packet from port 80 with spoofed microsoft.com ip

From: H C <keydet89(at)yahoo.com>
Date: Wed Jan 29 2003 - 15:01:42 EST

How does an ACK packet constitute an "attack"?

Did you run netstat on your system to view the states of connections on that system?

How did you determine that the packet had been spoofed?

• Michael Rowe <mrowe@mojain.com> wrote:
  > Hi,
  >
  > I received a packet on my cable modem today,
  

  ---

  
  > This list is provided by the SecurityFocus ARIS
  

  ---

Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Jan 29 18:38:26 2003