Re: Embryonic connections [7:38451]

2002-03-15 Thread Scott H.

The telco. denying responsibility for something--the hell you say!

Never heard of it before.

""Steve Smith""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Can anyone explain the term embryonic connections? I have a box that has
> increasing dropped embryonic connections which if I knew exactly what
> the term meant maybe I could help this Telco figure out what is wrong
> with their box that they say has no problems must be my router thing
> going on.
>
> Thanks!
>
> Steve Smith MCSE, CCNA, CCDA
> Data Networks Technical Manager
> Freeliant Inc.
> [EMAIL PROTECTED]
>
> The brave may not live forever, but the cautious never live.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38456&t=38451
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Embryonic connections [7:38451]

2002-03-15 Thread Alex Lei

I think it refers to half open TCP connections. For example, you may have a
whole bunch of SYN requests that your box has ACKed, but has not received a
SYN ACK from.

Alex


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38461&t=38451
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Embryonic connections [7:38451]

2002-03-15 Thread Richard Deal

Steve,

An embryonic connection is a half-open connection. Take TCP, for example.
With TCP, it goes through a three-way handshake (3 exchanges): SYN, SYN/ACK,
ACK. An example of an embryonic connection for TCP would be to see a SYN
without the other two parts of a handshake. This is a very popular form of a
Denial of Service (DoS) attack where a hacker floods a service with TCP
SYNs. Many firewall solutions, including the PIX and the IOS Firewall
feature set have mechanisms to deal with this kind of attack.

Hope this helps.

Cheers!


--
Richard Deal

* Author of the ebook "CCNA Secrets Revealed!" and Exam Cram and Exam Prep
books from the Coriolis Group
* Test author for QuizWare (www.quizware.com)

""Steve Smith""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Can anyone explain the term embryonic connections? I have a box that has
> increasing dropped embryonic connections which if I knew exactly what
> the term meant maybe I could help this Telco figure out what is wrong
> with their box that they say has no problems must be my router thing
> going on.
>
> Thanks!
>
> Steve Smith MCSE, CCNA, CCDA
> Data Networks Technical Manager
> Freeliant Inc.
> [EMAIL PROTECTED]
>
> The brave may not live forever, but the cautious never live.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38474&t=38451
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Embryonic connections [7:38451]

2002-03-15 Thread MADMAN

An embryonic connection is a connection that was started but never
completed.  A syn attack will produce embryonic connections so hey it
may not be the telcos fault:)

  dave

Steve Smith wrote:
> 
> Can anyone explain the term embryonic connections? I have a box that has
> increasing dropped embryonic connections which if I knew exactly what
> the term meant maybe I could help this Telco figure out what is wrong
> with their box that they say has no problems must be my router thing
> going on.
> 
> Thanks!
> 
> Steve Smith MCSE, CCNA, CCDA
> Data Networks Technical Manager
> Freeliant Inc.
> [EMAIL PROTECTED]
> 
> The brave may not live forever, but the cautious never live.
-- 
David Madland
Sr. Network Engineer
CCIE# 2016
Qwest Communications Int. Inc.
[EMAIL PROTECTED]
612-664-3367

"Emotion should reflect reason not guide it"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38486&t=38451
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]