Has anyone seen a server change the dest port on a syn-ack?
syn comes in port src 27373 dst 1445. syn-ack uses ports src 1445 dst 14019
syn comes in port src 27373 dst 1445. syn-ack uses ports src 1445 dst 14019
To enter a block of code:
Comments
Could be a NAPT going wrong.
I found that the source server uses an F5 LB as a default gateway
Sounds suspiciously like a misconfiguration in the F5.