On Tue, 5 Jun 2001, Eliyah Lovkoff wrote:
> 1.What is FIN?
http://httpd.apache.org/docs/misc/fin_wait_2.html has your answer.
> 2. Does FIN_WAIT_2 indicates that it was a FIN port scanning?
its possible it was a scan, but i think it may have been a SYN then ACK
(but no FIN, deducing this from the apache.org stuff).
possibly a broken tool? possibly a use of a tool described on bugtraq in
mid 2000:
http://groups.google.com/groups?hl=en&lr=&safe=off&ic=1&th=6c34ce6a7eb60cff,12&seekm=agPO4.530%24JQ1.14482%40news.itd.umich.edu#p
*hrm*
____________________________
jose nazario [EMAIL PROTECTED]
PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
PGP key ID 0xFD37F4E5 (pgp.mit.edu)
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
