Argus Flow reversal with ECRs ?? (fwd)

[Peter Van Epp]

	These analysis papers give the expected replies (which may have changed
in the wild as a result:

        http://staff.washington.edu/dittrich/misc/trinoo.analysis
        http://staff.washington.edu/dittrich/misc/tfn.analysis

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada


> 
>    Please give it a try.  By the way, any idea what a
> trojanized host will do if it gets an ECR packet?  I can't
> get anyone to tell me what I should expect.
> 
> Carter
>