North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: TCP receive window set to 0; DoS or not?

  • From: Christopher L. Morrow
  • Date: Thu Sep 07 20:28:26 2006 
On Thu, 7 Sep 2006 [email protected] wrote:

>
> On Thu, 7 Sep 2006, Joshua Brewer wrote:
>
> > What about when we're seeing this on port 25?
>
> Sand worms.
>
> In all seriousness, your guess is as good as mine, at that point. If
> memory serves, the platforms we saw this on most, with web browsers, were
> mobile devices. What kind of volume are you seeing this in?

I see this on web, ftp, rsync as well... so perhaps it's just impolite
people? :)