In the notes for the new S31 release it says that signature 3050 (Half-Open SYN) has been tuned, but it does not say in what way. Can someone give me some insight into this? Thanks.
A new sub signature was added to match Half-Open SYN floods to TCP port 22, SSH. It was added for completeness sake.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
