Sequence Number in Log does not match per connection

[Linus_Espach]

HI 2 All,

I have a case, where a connection passes several firewalls until its final destination. I can see the Connection within the log on all 3 (FW) hops.

Because it is the same segment, I was expecting the same sequence number within the logs on all 3 FWs. Unfortunately it is not the same number.

The sequence number is increasing.

Any hints what could be the reason for this?

Best regards

[PhoneBoy]

It is increasing by one, a random number, or?

[Linus_Espach]

Hi @PhoneBoy ,

it is increasing by a random number, so it looks like different segments...

Best regards

[Matthias_Haas]

Initial Sequence Number (ISN) Spoofing (IPS Signature) is not enabled ?

Matthias