Security Incidents mailing list archives
Re: Port 65535
From: Mike.Murray () UTORONTO CA (Murray, Mike)
Date: Sat, 4 Mar 2000 22:57:38 -0500
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Pavel,
That's good info... thanks... )
Now, why in the world would someone be sending me incomplete packets
exactly every two minutes? Anybody have experience getting this? Perhaps some
sort of misconfiguration, or something hostile?
On 04-Mar-00 Pavel Kankovsky wrote:
This is a fragment (F stands for fragment offset). ipchains leave port numbers equal to (u_short)(-1) if the fragment does not include a (complete) TCP/UDP header.
- ----------------------------------
Message sent on 04-Mar-00 at 22:59:02
Mike Murray
Apt 1402
666 Spadina Ave
Toronto, ON
M5S 2H8
Phone: (416) 323-3160
I can't think of anything pithy to say at
all, today. So, I ramble.
- ----------------------------------
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2
iQA/AwUBOMHbh4DBZTHOsqLmEQIRHgCeK9jSh0d/GiOLxTECOD/Gnv1PtAYAn3pL
2pLTLNUgoHBnnCHmdFImP9+a
=htZa
-----END PGP SIGNATURE-----
Current thread:
- Re: auto-reporting to ISPs, (continued)
- Re: auto-reporting to ISPs Rasmus Andersson (Mar 02)
- CNET Hackers hit e-commerce site Vincent Lee (Mar 02)
- UDP Probes (?) from port 28432 to 28431 ? Xander Jansen (Mar 04)
- Re: UDP Probes (?) from port 28432 to 28431 ? Alexander Schreiber (Mar 07)
- UDP Probes (?) from port 28432 to 28431 ? Klaus Moeller (Mar 07)
- Re: UDP Probes (?) from port 28432 to 28431 ? Xander Jansen (Mar 09)
- Re: CNET Hackers hit e-commerce site Chris Davis (Mar 04)
- Port 65535 Murray, Mike (Mar 02)
- @home: Is *anyone* really home there??? (fwd) Light Of Day (Mar 04)
- Re: Port 65535 Pavel Kankovsky (Mar 04)
- Re: Port 65535 Murray, Mike (Mar 04)
- Re: Port 65535 Richard Bejtlich (Mar 04)
- Re: Port 65535 Keith Pachulski (Mar 06)
- Re: auto-reporting to ISPs wozz () LUVEWE BONCH ORG (Mar 02)
- Re: auto-reporting to ISPs Stuart Staniford-Chen (Mar 06)