Rule Document 129:13

Report a false positive

Alert Message

No information provided

Rule Explanation

stream_tcp detected a 4-way handshake, which includes a TCP SYN (without ACK) in response to the initiating client SYN. stream_tcp.require_3whs = 0 should be set to ensure this can be detected in all cases.

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group

Rule Groups

No rule groups

CVE

None

Rule Vulnerability

No information provided

CVE Additional Information

This product uses data from the NVD API but is not endorsed or certified by the NVD.

None