Re: Logging unserved ports

Alan Cox (alan@lxorguk.ukuu.org.uk)
Sun, 13 Dec 1998 02:57:01 +0000 (GMT)


> this is a pretty unlikely circumstance to occur. I think transaction TCP
> works this way but I'm not sure.

Its only valid for T/TCP which is officially experimental and shouldnt
ever be used or enabled.

> No. RST combined with SYN or FIN isn't a sensible thing to send. A RST
> causes the connection to be immediately torn down and this is incompatible
> with either gracefully closing it or initiating a new one. :-)
>
> RST+ACK is valid though.

Some stacks RST SYN or FIN frames without clearing those bits. The actual
strict following of the state machine says this is fine for receive. Im
not sure its legal to send such frames but you occasionally see them - not
often enough to make it not worth logging

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/