Ask the Expert

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.

Expand all | Collapse all

How to test set system internet-options tcp-drop-synfin-set

  • 1.  How to test set system internet-options tcp-drop-synfin-set

    Posted 04-13-2021 17:40
    Hi,

    I have just set "set system internet-options tcp-drop-synfin-set" on some EX2200s and EX2300s. Is there a way to test this? Basically, I need a tool that can set the SYN and FIN at the same time on some packet(s) or stream, then send it to a device under test.

    Thanks,

    B


  • 2.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:54
    Hello,

    You could use NMAP to do this.

    > nmap -sS --scanflags SYNFIN

    Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CS​

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------



  • 3.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:55
    Hello,

    You could generate packets with SYNFYN  flags using NMAP.

    # 
    nmap -sS --scanflags SYNFIN <target>Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CAS

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------



  • 4.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:55
    Hello,

    You could use NMAP to do this.

    # 
    nmap -sS --scanflags SYNFIN
    Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CS

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------