[FW-1] SYN packet for established connection.

[Martins Jody <Jody.Martins@FW1-NOSPAMSERVICES.FUJITSU.COM>]

Title: SYN packet for established connection.

Hi,

Can anyone assist with the following problem on NG FP3;

A user is connecting to a Novell server, in the logs we see accepted packets using NCP. However, at any time during a file transfer/copy, the user's connection is dropped with them receiving the error message "The specified network is no longer available".

In SmartView tracker we see a dropped packet with the message "SYN packet for established connections".

Does this mean that the user or application is attempting to negotiate another three way handshake and that the Firewall is dropping it as it already can see an established connection between the source and destination?

Has anyone else experienced this or does anyone know of a resolution?

Regards,

Jody Martins CCSA

Network Security (Firewall) Engineer

Birmingham, England.