Skip to contentSkip to conversation

question on flags

DISCUSSION Leonardo Rodrigues Magalhães 2 participants 2 messages Jan 29, 2006

lore
Share & tools
lore
#0 lore raw

Hello People,

In normal situations, which would be the flags for SYN packets and
FIN packets of a tcp stream ?? I'm thinking of, in some few ports, log the beggining of the connection (SYN) and the end of the connection (FIN). I also know I should treat RST packets, because in problems situations i will never see FIN.

So, can you point me what tcp-flag combinations to look for ?

Thanks for the answers and for the attention.

Signature · 8 lines
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	[email protected]
	My SPAMTRAP, do not email it
#1 lore raw

You can find a good explanation an examples here:

http://iptables-tutorial.frozentux.net/iptables-tutorial.html

Jorge Dávila.

Quoted 12 lines · Leonardo Rodrigues Magalhães

Hello People,

In normal situations, which would be the flags for SYN packets and
FIN packets of a tcp stream ?? I'm thinking of, in some few ports, log the beggining of the connection (SYN) and the end of the connection (FIN). I also know I should treat RST packets, because in problems situations i will never see FIN.

So, can you point me what tcp-flag combinations to look for ?

Thanks for the answers and for the attention.

Signature · 6 lines
-----------------------------------------------------------------
Jorge Isaac Davila Lopez
-
sitio web: http://www.nicaraguaopensource.com/
correo-e: [email protected]
-----------------------------------------------------------------