"Broadcast TCP"??!?

[Jeff With The Big Yellow Suit]

On Wed, Jun 30, 2004 at 07:17:46AM -0700, David Wolfskill wrote:

 > The ones that got my attention, though, were the ones
 > directed at 64.62.202.255:25. I don't recall seeing an
 > attempt to send TCP traffic to a broadcast address
 > before. (UDP, sure; that often makes sense. TCP?)
 >
 > Anyway, I found it oddly amusing, and thought I'd share....

 


My two initial guesses would be defective software or
some kind of fingerprinting program.  I suspect that
different TCP implementations would respond to the
non-sensical packets in different ways.  That could be
useful for identification.

-jeff