PDA

View Full Version : Reverse TCP Desynchronization Attack?


Pnevma
August 19th, 2007, 01:53 PM
I was going through the firewall log files for ESS out of boredom and came across this...

-{ Quote: "8/19/2007 4:29:55 AM Detected Reverse TCP Desynchronization attack from 205.188.248.170:5190 to 192.168.15.3:4386 TCP
8/19/2007 4:29:55 AM Detected Reverse TCP Desynchronization attack from 64.12.165.97:5190 to 192.168.15.3:4398 TCP " }-

(I added the to and from.)

My question is, what's a Reverse TCP Desynchronization Attack?

ASpace
August 19th, 2007, 02:00 PM
Hi ! Open Eset Smart Security's help file and you can find out what it is

trjam
August 19th, 2007, 04:10 PM
here (http://www.wilderssecurity.com/showthread.php?t=178786) is some real help.

kC_
August 26th, 2007, 12:00 PM
whilst copying somefiles over trusted network (40gb ish to transfer..) about 20minutes in, it stopped and said "network name is no longer availiable"
so i looked in ESS (beta2) log, and saw

26/08/2007 16:59:51 Detected TCP Desynchronization attack 192.168.0.7:139 192.168.0.2:3024 TCP

why?


cheers

p.s was a MCE2005 pc (no firewall/av) gigabit wired to XP PRO SP2 pc (with ess beta2)