Security Incidents mailing list archives
Re: unknown IP packets
From: mark () ENTROPYNET COM (Mark Shirley)
Date: Tue, 15 Feb 2000 07:09:08 -0500
sorry everyone, i should have done more research before i posted this. it seems that the current release of iplog on freebsd has a problem with reporting these packets. the latest cvs disables these messages by default incase anyone else is having this problem. there were no spoofed packets being sent to me after all On Mon, Feb 14, 2000 at 12:53:21PM -0500, Mark Shirley wrote:
i usually don't post unusual logs here but this struck my eye. i have never seen this before. Feb 14 12:47:20 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.6.57 Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.45.6.160 Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.17.26 Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.52.17.241 Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.17.26 Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.52.17.241 Feb 14 12:47:23 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.54.6.210 Feb 14 12:47:23 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.6.181 it seems that i am getting flooded with them. thousands upon thousands.
Current thread:
- unknown IP packets Mark Shirley (Feb 14)
- Strange IP_MASQ Log.. thegreencow (Feb 14)
- Re: unknown IP packets Mark Shirley (Feb 15)
- Re: unknown IP packets Robert Graham (Feb 15)