The intrusion detection system at your site has detected Internet Protocol (IP) packets where the
IP source address is the same as the destination address.
This situation indicates

A.
Misdirected traffic jammed to the internal network.

B.
A denial of service attack.

C.
An error in the internal address matrix.

D.
A hyper overflow in the IP stack.

Explanation:
“The Land denial of service attack causes many older operating systems (such as
Windows NT 4, Windows 95, and SunOS 4.1.4) to freeze and behave in an unpredictable manner.

It works by creating an artificial TCP packet that has the SYN flag set. The attacker set the
destination IP address to the address of the victim machine and the destination port to an open
port on that machine. Next, the attacker set the source IP address and source port to the same
values as the destination IP address and port. When the targeted host receives this unusual
packet, the operating system doesn’t know how to process it and freezes, crashes, or behaves in
an unusual manner as a result.” Pg 237 Tittel: CISSP Study Guide