Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

TCP Flood ID: 8501

L4 Transporter

On our user TAP interface (a TAP that collects user trafic only), we see 1000's of TCP flood events from to ; port 0 to port 0; Zone user to Zone user. It is always Session ID of 0. I have tried to do packet captures, but I never seem to get anything. It also doesn't show in session browser (probably because the session is 0!) Anyone else see this? Any idea what this is?

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.
Who Me Too'd this topic