Ask the Expert

  • 1.  How to test set system internet-options tcp-drop-synfin-set

    Posted 04-13-2021 17:40
    Hi,

    I have just set "set system internet-options tcp-drop-synfin-set" on some EX2200s and EX2300s. Is there a way to test this? Basically, I need a tool that can set the SYN and FIN at the same time on some packet(s) or stream, then send it to a device under test.

    Thanks,

    B


  • 2.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:54
    Hello,

    You could use NMAP to do this.

    > nmap -sS --scanflags SYNFIN

    Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CS​

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------



  • 3.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:55
    Hello,

    You could generate packets with SYNFYN  flags using NMAP.

    # 
    nmap -sS --scanflags SYNFIN <target>Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CAS

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------



  • 4.  RE: How to test set system internet-options tcp-drop-synfin-set

    Posted 04-14-2021 15:55
    Hello,

    You could use NMAP to do this.

    # 
    nmap -sS --scanflags SYNFIN
    Reference: https://nmap.org/book/scan-methods-custom-scanflags.html

    Regards,
    CS

    ------------------------------
    CARLOS ALBERTO SATELES DA SILVA
    ------------------------------