User Tools

Site Tools


pfsense:suricata:alerts:suricata_stream_timewait_ack_with_wrong_seq

This is an old revision of the document!


PFSense - Suricata - Alerts - SURICATA STREAM TIMEWAIT ACK with wrong seq

The ack is the acknowledgement of the receipt of all previous (data)-bytes sent by the other side of the TCP-connection.

In most occasions every packet of a TCP connection has an ACK flag after the first SYN and a ack-number which increases with the receipt of every new data-byte.

Here, that ack-number sequence is not an incremental of the previous ack-number.


Suppress



pfsense/suricata/alerts/suricata_stream_timewait_ack_with_wrong_seq.1610670440.txt.gz · Last modified: 2021/01/15 00:27 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki