DOS?

Sabri Berisha sabri at cluecentral.net
Sat Jan 25 08:43:24 UTC 2003


On Sat, 25 Jan 2003, Christopher J. Wolff wrote:

Hi,

> It looks like all hell is breaking loose on some of the nations
> backbones.  http://www.internethealthreport.com

You are not the only one.. I've been sitting here since 06:30 now. So far
I have discovered that a lot of Windows boxes send out UDP packes of 376
bytes to random addresses.

09:36:51.711380 802.1Q vlan#50 P0 213.136.0.251.3303 > 239.103.224.157.1434:  udp 376 [ttl 1] (id 10818, len 404)
0x0000 0032 0800 4500 0194 2a42 0000 0111 e78e.2..E...*B......
0x0010 d588 00fb ef67 e09d 0ce7 059a 0180 81db.....g..........
0x0020 0401 0101 0101 0101 0101 0101 0101 0101................
0x0030 0101 0101 0101 0101 0101 0101 0101 0101................
0x0040 0101 0101 0101 0101 0101 0101 0101 0101................
0x0050 0101                                   ..


-- 
Sabri Berisha
	www.cluecentral.net
		"I route, therefore you are"






More information about the NANOG mailing list