Firewall Wizards mailing list archives

Re: udp port 0


From: "Kristian Erik Hermansen" <kristian.hermansen () gmail com>
Date: Tue, 5 Feb 2008 11:01:05 -0800

On Feb 5, 2008 9:00 AM,  "shadow floating" <nadengine () googlemail com> wrote:
i keep getting logs from my IOS router 12.4 T about denying udp packet
ip a.a.a.a (0) --> b.b.b.b (0)
i kept googling about udp port zero and it's apperantly not used , at
least legitimately. I also inspected the traffic from the logged ip
address via wireshark and it never captures and udp packet with src or
dst port 0, but i still get these logs all day long.
anyone got idea about what it? is it some kind like udp tracerouting ?

I would put this in the category of an attempt to crash certain
firewall implementations...
http://www.nessus.org/plugins/index.php?view=single&id=10074
-- 
Kristian Erik Hermansen
"Know something about everything and everything about something."
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: