Security Incidents mailing list archives

Re: unknown IP packets


From: mark () ENTROPYNET COM (Mark Shirley)
Date: Tue, 15 Feb 2000 07:09:08 -0500


sorry everyone, i should have done more research before i posted this.  it seems that the current release of iplog on 
freebsd has a problem with reporting these packets.  the latest cvs disables these messages by default incase anyone 
else is having this problem.  there were no spoofed packets being sent to me after all

On Mon, Feb 14, 2000 at 12:53:21PM -0500, Mark Shirley wrote:
i usually don't post unusual logs here but this struck my eye.  i have never seen this before.


Feb 14 12:47:20 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.6.57
Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.45.6.160
Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.17.26
Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.52.17.241
Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.17.26
Feb 14 12:47:21 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.52.17.241
Feb 14 12:47:23 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.54.6.210
Feb 14 12:47:23 cyberfrg iplog[90430]: Warning: Short IP packet received from 0.64.6.181


it seems that i am getting flooded with them.  thousands upon thousands.



Current thread: