TCP Out of range timestamp

[Ian_Harrison]

Hi

Just wondered if anyone else is seeing a high number (compared to other intrusions that I can see) of 'TCP Out Of Range Timestamp' intrusions?  I have an IPS sensor set up to protect some web servers and have noticed this, is this just normal traffic or something I need to be worried about.  By default the IPS signature is set to pass the rule.

Thanks for any help

Ian

[aihngeltech]

Yes I've noticed a ton of these since the start of the year. Maybe a date issue somewhere?

[aveloz]

Does anyone have more info on this?

I'm noticing this too.

[jdambra]

Any news on this? The number of these events greatly surpases the numbers for any other type of intrusion in our systems...