Firewall Wizards mailing list archives
Re: udp port 0
From: "Kristian Erik Hermansen" <kristian.hermansen () gmail com>
Date: Tue, 5 Feb 2008 11:01:05 -0800
On Feb 5, 2008 9:00 AM, "shadow floating" <nadengine () googlemail com> wrote:
i keep getting logs from my IOS router 12.4 T about denying udp packet ip a.a.a.a (0) --> b.b.b.b (0) i kept googling about udp port zero and it's apperantly not used , at least legitimately. I also inspected the traffic from the logged ip address via wireshark and it never captures and udp packet with src or dst port 0, but i still get these logs all day long. anyone got idea about what it? is it some kind like udp tracerouting ?
I would put this in the category of an attempt to crash certain firewall implementations... http://www.nessus.org/plugins/index.php?view=single&id=10074 -- Kristian Erik Hermansen "Know something about everything and everything about something." _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- udp port 0 shadow floating (Feb 04)
- Re: udp port 0 Darden, Patrick S. (Feb 05)
- Re: udp port 0 Tony Rall (Feb 06)
- Re: udp port 0 Husnu Demir (Feb 05)
- Re: udp port 0 rainer . ginsberg (Feb 06)
- Re: udp port 0 stursa (Feb 06)
- Message not available
- Message not available
- udp port 0 shadow floating (Feb 07)
- Message not available
- Re: udp port 0 Darden, Patrick S. (Feb 05)
- <Possible follow-ups>
- Re: udp port 0 Kristian Erik Hermansen (Feb 06)