[181127] in North American Network Operators' Group
Re: Fkiws with destination port 0 and TCP SYN flag set
daemon@ATHENA.MIT.EDU (Roland Dobbins)
Wed Jun 17 05:47:43 2015
X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Wed, 17 Jun 2015 11:44:52 +0200
In-Reply-To: <HE1PR02MB07321401ECCB0D0B154BFB41D6A60@HE1PR02MB0732.eurprd02.prod.outlook.com>
Errors-To: nanog-bounces@nanog.org
On 17 Jun 2015, at 11:34, Maqbool Hashim wrote:
> What might be easier is to set up a span port for the hosts access
> port on the switch and grab that via the collector laptop I have.
It's better to collect as much information you have without perturbing
the systems involved, anyways.
-----------------------------------
Roland Dobbins <rdobbins@arbor.net>
