Still problems with ra -A (and tcp smurf logs)

Russell Fulton r.fulton at auckland.ac.nz
Tue Dec 5 14:56:48 EST 2000


On Tue, 5 Dec 2000 08:38:29 -0500 Carter Bullard <carter at qosient.com> 
wrote:

> Hey Russell,
>   Yes I have fixed this in the mythical "F" release,
> which I hope to have out tomorrow.  Sorry for the delay!!!!
> 
> What is the "_" notation at the of your records?
> Am I doing that or are you ;o)

Oh its definitely you ;-) and it is quite correct. I have -Zb (both 
flags) and these are outgoing RST+ACK == RA_.  if they were incoming 
RST+ACK then it would be _RA

Cheers, Russell.



More information about the argus mailing list