InfraGuard

Detection rule: Wrong Sequence Number

Packets carrying an unexpected seq during handshake or teardown.

WarningTCP Stream IntegritySuricata

What it detects

Packets carrying an unexpected seq during handshake or teardown.

Why it fires

A signal of spoofing, replay or out-of-order insertion.

Worst case

Session spoofing

Matching signatures

wrong seq

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.