What pattern should we expect (in a packet header dump) from a host that is port scanning another host ?

I have a dump of packet headers, and I am supposed to find a host that is port scanning another host, what patterns should I be looking for ?

Thanks in advance guys.

submitted by /u/Iam_cool_asf
[link] [comments]

from hacking: security in practice https://ift.tt/368G7Al