<div>Looking at some suspicious behaviour in our logs...</div>
<div> </div>
<div>If someone sends a packet with the SYN bit set to a host, typically what is the client's source port? Or is that crafted too?<br> <br>And additionally, when a client does sent a packet of this type, am I right in assuming its generally TCP only? Can you have a UDP SYN packet? I assume because its connectionless, no???
</div>