cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
474
Views
0
Helpful
1
Replies

TCP Packet, No Flags alerts

s.hlungwani
Beginner
Beginner

Hi

I'm experincing a high number of TCP Packet, No Flags from different machines to most of my clients on port 80.

Has anyone experinced this and what was the solution to this as i've got a feeling that this might be false positive alerts.

One more thisng is that majority of this alerts are coming from dial-up users.

1 Reply 1

klwiley
Cisco Employee
Cisco Employee

The alert is not a false positive that is for certain. If the sensor is saying that it is seeing TCP packets with no flags then it is seeing TCP packets with no flags. I am not aware of any valid reason for this type of traffic to be present on your network. A broken stack may be responsible.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers