Transmission Control Protocol (TCP) is a transport layer protocol that provides a connection-oriented data stream service with guaranteed, in-order delivery.

learn more… | top users | synonyms

5
votes
1answer
168 views

How can I explain to the client that rfc2385 TCP MD5 Checksums can't be turned on for linux webservers?

I've had a long running conversation with a client where they perform a Rapid7 security scan which then warns about TCP MD5 checksums missing on port 80. This is what I think I know: RFC 2385 was ...
1
vote
0answers
43 views

Connecting to postgres with SSL

I need help understanding some basics about the postgres database server and SSL. I am developing a Windows desktop application that will connect to a postgres database, in single user mode, with both ...
1
vote
0answers
77 views

The simplest way to emulate TCP-IP protocol violation / anomaly attacks

Reading up upon security on web applications I did not found that much info on TCP-IP and in particular HTTP/UDP protocol violation / anomaly attacks. My question: What is the general mechanism of ...
0
votes
0answers
96 views

OSSEC, what is it telling me about port changes?

I've been diving into OSSEC for the last couple of months, but I feel unclear on one of it's alerts. I've provided the alert below. The main difference I see in previous output and current output is ...
0
votes
0answers
98 views

How to simulate an UDP / TCP / Multiple Ports via Honeyd daemon?

I am using honeyd daemon to simulate TCP port on a Linux Ubuntu machine using honeyd.conf file which was configured to do so with the following script :- 1 create default 2 set default personality ...
0
votes
0answers
41 views

Is it possible to covertly tunnel data using L3DSR? (or any other TCP or IP layer hack)

I asked this question on ServerFault regarding how a Netscaler embeds low level data in a TCP packet, round-trips it, and then uses that data to loadbalance the user. Similar to DNS Tunneling, I ...
0
votes
0answers
26 views

How to route RST injections

Lots of security appliances and software support RST injection. Plenty of material exists on the algorithmics of the RST packet(s) (making them fit the context of the targeted TCP connection, ...