Re: Attack on UDP 101

Stefan Fouant sfouant at
Sat Jul 21 18:32:12 UTC 2012

Can you give us more  information? What do you mean it is causing Layer 3 loops?

Stefan Fouant

Sent from my HTC on the Now Network from Sprint!

----- Reply message -----
From: "Shahab Vahabzadeh" <sh.vahabzadeh at>
Date: Sat, Jul 21, 2012 10:50 am
Subject: Attack on UDP 101
To: <nanog at>

Hi there,
Does any body know any report about attack on UDP Port 101 which make Layer
3 Loops?
This is an example sniff:

Source IP Address is :
Source port: 62946  Destination port: 101
2012-07-21 11:11:09.646757


Shahab Vahabzadeh, Network Engineer and System Administrator

Cell Phone: +1 (415) 871 0742
PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81  C2EE 76A2 46C2 5367 BF90

More information about the NANOG mailing list