[Full-disclosure] Crafted SYN Packets...

[Kelly Robinson]

Looking at some suspicious behaviour in our logs...

If someone sends a packet with the SYN bit set to a host, typically what is
the client's source port? Or is that crafted too?

And additionally, when a client does sent a packet of this type, am I right
in assuming its generally TCP only? Can you have a UDP SYN packet? I assume
because its connectionless, no???
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20071114/5272949a/attachment.html