Snort "TCP session without 3-way handshake" warning

Peter Humphrey <[email protected]>
Newsgroups gmane.comp.kde.users.pim
Organization at home
Message-ID <9980185.oD6OKvsoRE@wstn>
Hello list,

I'm running KMail 4.11.5 on a Gentoo amd64 box. One of my accounts is a POP3 
connection to my LAN server. I installed snort on the server yesterday, and 
now I get warnings like this in the snort alert log:

[**] [129:20:1] TCP session without 3-way handshake [**]
[Classification: Potentially Bad Traffic] [Priority: 2] 
04/09-10:13:39.343914 192.168.0.6:49854 -> 192.168.0.2:22
TCP TTL:64 TOS:0x10 ID:37404 IpLen:20 DgmLen:104 DF
***AP*** Seq: 0xF037D897  Ack: 0x8F8FE3C5  Win: 0x152  TcpLen: 32
TCP Options (3) => NOP NOP TS: 249552861 325460764 

The IPs are this box, 192.168.0.6, and the server, 192.168.0.2, which is 
running dovecot 2.2.9 to serve POP3 e-mails.

Do I need to set something in KMail, or is this a bug - or is snort being too 
pernickety? I have nearly 5MB of logs from snort already.

-- 
Regards
Peter

_______________________________________________
KDE PIM users mailing list
Subscription management: https://mail.kde.org/mailman/listinfo/kdepim-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.