Firewall-1

Re: [FW-1] Tcp Packet Out of State

Subject: Re: [FW-1] Tcp Packet Out of State
From: Security Operation Center <cmaxsoc AT HOTMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 17 Jul 2003 12:58:10 +0530
Hi Jason,

check the traffic using the sniffer on the switch? Make the switch port to
10 or 100 as corresponding connected clinet on port of switch.
TCP packet out of state indicated the packet are not coming in the session
duration ?
hope this might help,

Regards,
Atul Dalal

----- Original Message -----
From: "Jason Cameron" <jasonc AT FIN-X DOT COM>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Wednesday, July 16, 2003 11:57 AM
Subject: [FW-1] Tcp Packet Out of State


I seem to receive alot of tcp packet out of state ( flags 10,4,18 etc )
information in my fwlogs. My leased line clients are connecting via 32k
cir frame-relay wan and also have dialup clients. My switches are not
set to auto-negotiate and the server nics are set 100mb full duplex. Can
anybody explain or assist in why I have such a high amount of tcp packet
out of  state logs . On average up to 50 of these types of messages a
day

Thanks


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>