What does this say about the ORDER of processing??

-- Anonymous, August 27, 2000

Answers

Bob,

What it says to me is Wow!

I think you should post a query with a reference to this URL on Shields Up and maybe comp.security.firewalls also.

Heck, this might even be worth posting on the Unofficial AtGuard User's Forum!

(This _is_ serious, right?? Not an overdue April fool's kind of thing???)

Allen tells me we are now famous at ShieldsUp, incidentally!

-- Anonymous, August 27, 2000

Speculation:

This seems to be a Sub7 portscan, sometimes you get one or more of them immideately after the initial attempt. Since the times are different (1 second but...) ZA maybe missed the second attempt (because it was busy processing the first one) or (more likely) the connection attempt was captured by both at the same time. For a more detailed analysis it would be necessary to know how the "famous" ZA True Vector Engine operates (AtGuard seems to filter TDI messages).

Sven

-- Anonymous, August 28, 2000