cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

Duplicate TCP SYN from inside to inside different initial sequence number

kenneth.greene
Level 1
Level 1

Hello,

Anyone ever seen this?

%ASA-4-419002: Duplicate TCP SYN from inside:10.%.%.%/3283 to inside:10.%.%.%/3283 with different initial sequence number

We are getting incredible amounts of these alerts at first I thought it was some kind of attack. The alerts come from any number of source/destination IP's differetnt ports also.

Who Me Too'd this topic