What does syn_sent mean?
Posted 12 December 2006 - 11:25 PM
Posted 13 December 2006 - 06:31 PM
Posted 14 December 2006 - 11:11 AM
Furthermore, if you are to post 10 topics related to each other, please consider condensing them in fewer threads. I will now edit the thread title from "WTF does this means?" to "What does syn_sent mean?"
Posted 19 December 2006 - 07:49 AM
i've seen your other posts on the forum, and you seem to be really new at this sort of stuff, all you really need to do is find ebooks on the internet and read, read and reread until you understand what your reading. good luck on your quest for knowledge
oh yh hi everybody (those who know me)
Posted 19 December 2006 - 06:10 PM
The state SYN-SENT means that Alice has sent the initial SYN message and is waiting for either SYN/ACK (connection attempt accepted) or RST (connection attempt refused). This state doesn't usually hang around, it lasts as long as it takes for the listener to respond. There are some conditions that can make SYN_SENT show up in netstat though.
- You're really lucky or your connection is very slow. SYN_SENT may only last for a fraction of a second on a fast connection, you'd have to hit netstat just at the right time to see it. If your connection is slower or congested, that window is larger.
- The listener is dropping packets. This can be intentional, "stealthed" ports don't send RST on connection refused, they don't send anything at all. This can be unintentional as well, high load or congestion can cause dropped packets.
- Your ISP is dropping packets. About the time of one of the big worms that spread on port 139, my ISP started filtering (that is, dropping) all outbound (and probably inbound) packets on port 139.
BinRev is hosted by the great people at Lunarpages!