
9/5/2024 · Luke Valenta
What this post added
Introduced a new dashboard and API endpoint on Cloudflare Radar to track and analyze anomalous TCP connections (resets or timeouts within the first 10 ingress packets). This involved developing detection mechanisms to classify these connections and provide insights into network issues, scanning, and attacks. The post details the classification of connection stages (Post-SYN, Post-ACK, Post-PSH, Later) and provides guidance on interpreting the data.