[nsp-sec] Unrequited packet love

Tue Jul 15 05:32:57 EDT 2008

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Freedman wrote on 14-7-2008 15:05:

> Just had some destined to my personal box, port 113, can these ASNs
> (or their representatives) please check these hosts out:
> 
> 1133    | 130.89.1.65      | UTWENTE-AS University Twente

UDP or TCP?

I can't find anything wrong on this system. And when I check flows on
and around your time window I don't see any from this IP address to yours.

IP 130.89.1.65 and IP 193.221.118.97
Date flow start          Duration Proto      Src IP Addr:Port
Dst IP Addr:Port   Flags Tos  Packets    Bytes Flows
Summary: total flows: 0, total bytes: 0, total packets: 0, avg bps: 0,
avg pps: 0, avg bpp: 0
Time window: 2008-07-14 07:54:55 - 2008-07-14 16:04:59
Total flows processed: 75834229, Records skipped: 0, Bytes read: 3944504884
Sys: 24.764s flows/second: 3062211.4  Wall: 147.293s flows/second: 514850.4

The timezone mentioned in my Time Window is CET (UTC+1). I don't know
whether this is DST but that is why I extended the window a bit.

- --
Peter Peters
SURFcert Officer off Duty
cert at surfnet.nl                            http://cert.surfnet.nl/
office-hours: +31 302 305 305    emergency (24/7): +31 622 923 564
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIfG7HelLo80lrIdIRAlxgAJ9xHO4KudsbnRhEV20g7n9pJCwH2QCfYG7e
bGblfTI4C9FWXHSz57jCzEQ=
=wqA7
-----END PGP SIGNATURE-----