[nsp-sec] Odd packets from 255.127.0.0

Borja Marcos borjamar at sarenet.es
Mon Oct 6 10:04:51 EDT 2014



Hi

Since yesterday around 21:30 UTC we are receiving TCP packets with source address 255.127.0.0, source and destination port 0, assorted options (sometimes malformed). 

We see the packets coming from cogent, level3, colt and Tata. Nothing on peerings.


Is anyone seeing the same? Any known buggy equipment?

Btw I tried to access the IRC server and it said I'm not registered, been a long time.



Borja.





More information about the nsp-security mailing list