TCP Packet, No Flags alerts

[s.hlungwani]

Hi

I'm experincing a high number of TCP Packet, No Flags from different machines to most of my clients on port 80.

Has anyone experinced this and what was the solution to this as i've got a feeling that this might be false positive alerts.

One more thisng is that majority of this alerts are coming from dial-up users.

[klwiley]

The alert is not a false positive that is for certain. If the sensor is saying that it is seeing TCP packets with no flags then it is seeing TCP packets with no flags. I am not aware of any valid reason for this type of traffic to be present on your network. A broken stack may be responsible.