Re: DoS attack against TCP services

[Sverre Froyen <sverre%viewmark.com@localhost>]

> On 2015-02-04, at 13:08, 6bone%6bone.informatik.uni-leipzig.de@localhost wrote:
> 
> I picked out one connection:
> 
> fffffe8678e73990 tcp        0      0 139.18.25.33.58935    199.254.60.1.53     TMWAIT
> 
> 
> But 'fstat -n | grep 73990' shows no result. lsof also shows no socket for this connection.

I don’t see the socket addresses being reported by "fstat -n" for tcp connections. I do see the IP addresses and port numbers, however. How about

	fstat -n | grep 139.18.25.33:58935

Regards,
Sverre

PS Please ignore my previous post. I had the scenario backwards.