P |
Peter Bin |
Port Scan sensor also tracks outgoing connections which fail to setup (causing to only have a SYN packet instead of being followed by ACK).
This behavior can occur when connections to SecurityHive's servers are blocked.