TCP post connection SYN
advICE :Intrusions : 2000311

Summary

Attacker is trying to avoid detection by sending a SYN frame with a different sequence number than the original SYN.

Details

This attack may cause an IDS (Intrusion Detection System) to desynchronize with the original connection. The attacker may then continue without being detected.

parametric information initial_seq The original SYN sequence number . this_seq The new SYN sequence number.

 
Version appeared: 1.8.6