nanog mailing list archives

Re: routing invalid IP addresses


From: "Laurence F. Sheldon, Jr." <LarrySheldon () cox net>
Date: Sat, 21 Feb 2004 09:33:02 -0600


Geo. wrote:

We had an attack here last night and the attack traffic was coming from an
IP address of x.x.255.x which isn't a valid IP address yet the traffic was
being routed over the internet (as far as I can tell anyway). When I
attempted to track down the source I found our cisco routers wouldn't accept
the address as valid so it was not possible to null route or trace the
traffic.

Has anyone else ever seen this before? Clue me in?

Invalid?  Really?  I used to manage a small collection of cisco routers
and I don't recall any of them complaining about such an address.

What color is the sky there?




Current thread: