IBM Support

MA40530 - TCPIP-OTHER-INCORROUT IDS ACKSTORM EVENT GENERATED BY TCP/IP
WINDOW PROBES

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 APAR (Authorized Program Analysis Report)

Abstract

TCPIP-OTHER-INCORROUT IDS ACKSTORM EVENT GENERATED BY TCP/IP
WINDOW PROBES

Error Description

Intrusion Detection System Generates ACKSTORM Event Because of  
TCP/IP Window Probes.                                          

Problem Summary

                                                               
Intrusion Detection System Generates ACKSTORM Event Because of  
TCP/IP Window Probes.                                          

Problem Conclusion

A non-standard window probe was received and this caused TCP to
trigger its notification to IDS of a possible ACKSTORM. The test
for a possible ACKSTORM will be relaxed so that this type of    
window probe, which is used by some systems, does not needlessly
trigger this event.                                            

Temporary Fix

Comments

COMMENTS:                                                      

Circumvention


PTFs Available

R610 MF52316 PTF Cover Letter   1102
R611 MF52347 PTF Cover Letter   1102
R710 MF52348 PTF Cover Letter   1116

Affected Modules

         
         

Affected Publications

Summary Information

Status............................................ CLOSED PER
HIPER........................................... No
Component.................................. 9400DG3TC
Failing Module.......................... RCHMGR
Reported Release................... R610
Duplicate Of..............................




System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15Q","label":"APARs - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V6R1M0;V6R1M1;V7R1M0","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG16B","label":"APARs - i5\/OS V6R1 environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V6R1M0;V6R1M1;V7R1M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
14 May 2011