Refer to the exhibit. What is occurring in this network traffic?
Refer to the exhibit. What is occurring in this network traffic?
The network traffic capture shows a high number of SYN packets being sent from a single source IP (10.128.0.2) to a single destination IP (10.0.0.2) on port 80. This pattern is indicative of a SYN flood attack, where multiple attempts to initiate TCP connections are made without finalizing them, which can overwhelm the targeted server or network device. Therefore, the correct answer is a flood of SYN packets coming from a single source IP to a single destination IP.
The correct answer:D. Flood of SYN packets coming from a single source IP to a single destination IP.
In the provided network traffic capture, there is a flood of SYN packets (Synchronize) coming from a single source IP (10.128.0.2) to a single destination IP (10.0.0.2) on port 80. This is indicative of an attempt to establish multiple TCP connections. Therefore, the correct answer is D. Flood of SYN packets coming from a single source IP to a single destination IP
The correct answer: D - Flood of SYN packets coming from a single source IP to a single destination IP.
This is a loop in the network! Indeed is Flood of Syn and no final 3 way handshake as packet returns back to the source from the single destination.
What about the fact that the SYNS are coming from multiple ports?
yes its sync flood