Re: [nsp] UDP 1015

From: Andrew (arousch@home.com)
Date: Tue Nov 14 2000 - 14:06:09 EST


Is this on an @home pipe? It doesn't mean it's spoofed. Someone could be
leaking 192.168/16, could be OOB junks, or could be spoofs.

At 01:06 PM 11/14/00 -0500, Angelo Neacsu wrote:
>I get this on my logs:
>
>list 143 denied udp 192.168.102.1(1015) (Ethernet1/0 0060.520b.5a77) ->
>255.255.255.255(1015), 726 packets
>
>Why ?
>Is this an attack from a spoofed IP ?
>
>---
>Angelo Neacsu
>Mediafax
>
>"If you want to travel around the world and be invited to speak at a lot
>of different places, just write a Unix operating system."
>(By Linus Torvalds)



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:21 EDT