Ask Your Question

Revision history [back]

Strange TCP syn/ack behavior

Hello everyone. I have a web server that is initiating weird traffic. Essentially here is the jist: Source : 10.10.50.80:443 Dest : (a few external IPs):22

There isn’t a lot of traffic between them, but it all looks like this:

SYN/ACK Retransmission of SYN/ACK Retransmission of SYN/ACK RST

in that order. Bear in mind, this is from my server TO the random ext IPs.

What are your thoughts on this?