What it detects
RSTs injected out of step with the session flow.
Why it fires
Signals forced connection teardown (censorship, MITM, bypass).
Worst case
Connection reset · MITM
Matching signatures
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.