Stateful filters In earlier example, any packet with ACK=1 and source port 80 gets in a Attacker could, for example, attempt a malformed packet attack by sending ACK=1 segments Stateful filter Adds more intelligence to the filter decision-making process a Stateful remember past packets a Memory implemented in a very dynamic state tableStateful Filters ◼ In earlier example, any packet with ACK=1 and source port 80 gets in. ❑ Attacker could, for example, attempt a malformed packet attack by sending ACK=1 segments ◼ Stateful filter: Adds more intelligence to the filter decision-making process ❑ Stateful = remember past packets ❑ Memory implemented in a very dynamic state table 12