Friday, 1 February 2013

TCP SYN (Half-Open)


TCP SYN (Half-Open)

A SYN scan aims to be more stealthy by initiating a handshake with a
SYN packet. However, should a SYN/ACK be received, the sender
responds with a RST packet, destroying the connection. As a full
connection is never established, some security devices will not log the
scan, current commercial devices will recognize this as a port scan and
comment accordingly.

No comments:

Post a Comment