routing invalid IP addresses

Geo. georger at getinfo.net
Sun Feb 22 03:21:56 UTC 2004



>     Anybody hook up a new Macintosh lately?  OS X seems to spew traffic in
> that range.  It appears to be some optional component as they don't all do
> it, about half of ours do it.  I haven't cared enough to track down what
> exactly is doing it.

Not on this segment, only two linux boxes directly on the wire and two NT
boxes behind a Pix 506e. Whatever was going on has stopped now so I'm just
going from log fragments the admins are emailing me. It looks like someone
was trying to exploit apache/php on one of the linux boxes using spoofed udp
from that IP address I posted.

Geo.




More information about the NANOG mailing list