... script-based attacks.5 - 1Information Risk Management - SANS ©20011 Risk Management The Big Picture – Part VHoneynets and HoneypotsWelcome, let’s take a minute and revisit what we have learned so ... 2001v1.4 – edited/formatted by J. Kolde – 9 May 2001v1.4a – edited/revised by D. Tuttle – 24 July 2001v1.5 – updated E. Cole – 1 Nov 2001V1.6 – edited and audio recorded by C. Wendt – 16 Jan ... traffic. In the slide above, the packet is addressed to TCP port 143, the IMAP service. If the site does not allow IMAP through the firewall, then there will never be a SYN/ACK response, the TCP...