| Message Code | ASA-4-419002 |
| Severity | Warning |
| Description | Received duplicate TCP SYN from in_interface:src_address/src_port to out_interface:dest_address/dest_port with different initial sequence number. |
| Explanation | A duplicate TCP SYN was received during the three-way-handshake that has a different initial sequence number than the SYN that opened the embryonic connection. This could indicate that SYNs are being spoofed. This message occurs in Release 7.0.4.1 and later. in_interface—The input interface. src_address—The source IP address of the packet. src_port—The source port of the packet. out_interface—The output interface. dest_address—The destination IP address of the packet. dest_port—The destination port of the packet. |
| User Action | No action required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.