Re: Increase of DOS attacks using TCP src and/or dst of 0

On Wed, Mar 7, 2012 at 3:45 PM, Matthew Huff <mhuff@ox.com> wrote:

Anyone else see a massive increase of scanning/dos with TCP source and/or dst port of 0? We started seeing a massive increase today creating some issue with our firewalls.

srs/dst of 0 as measured how? (tcpdump? netflow? app logs?)