[Snort-users] strange alert

Dushyanth Harinath dushy at ...3222...
Thu Sep 27 03:39:11 EDT 2001

Hi folks,

Generated by ACID v0.9.6b15 on Thu September 27, 2001 15:19:01

------------------------------------------------------------------------------#(1 - 13467) [2001-09-27 15:11:15]  MISC same SRC/DST
IPv4: ->
hlen=5 TOS=16 dlen=40 ID=242 flags=0 offset=0 TTL=48 chksum=2174
TCP:  port=4 -> dport: 3  flags=******S* seq=662933
ack=83 off=5 res=0 win=1024 urp=0 chksum=3225
Payload: none

port 4 is unassigned and port 3 is used by compressnet

Can anybody tell me what does this alert mean?

First they ignore you,            | Dushyanth Harinath
then they laugh at you,           | Programmer/SysAdmin
then they fight you,              | Archean Infotech
then you win.- Mahatma Gandhi     | http://www.archeanit.com
(possibly not talking about Linux)|

This email was sent using SquirrelMail.
   "Webmail for nuts!"

More information about the Snort-users mailing list