Invalid TCP Source Port
Severity: Low
This attack poses a minor threat. Corrective action may not be possible or is not required.
Attack Category: Suspicious Activity
Anomalous network conditions or traffic patterns. A suspicious activity signature, for example, might detect two systems with identical IP addresses, a condition that indicates an attempted IP spoofing attack.
Description
This attack signature detects packets with a TCP source port of 0. 0 is an invalid value for the TCP source port and must not be used.
Attackers sometime send TCP packets with a source port of 0 as a means of fingerprinting/profiling your operating system.
False Positive
None.
thats what the FW says but i dont really get it.