Snort mailing list archives
MISC same SRC/DST
From: Vjay LaRosa <vjayl () emc com>
Date: Tue, 23 Oct 2001 12:38:40 -0400
Can some one explain how a packet like this could be generated? Are there any tools that are known that can do this? Thanks! vjl [**] MISC same SRC/DST [**] 10/23-11:52:10.267310 90.0.0.1:5300 -> 90.0.0.1:5300 UDP TTL:58 TOS:0x0 ID:53139 IpLen:20 DgmLen:88 DF Len: 68 0x0000: 08 00 20 E5 97 42 00 30 96 2D F5 FD 08 00 45 00 .. ..B.0.-....E. 0x0010: 00 58 CF 93 40 00 3A 11 BC FF 5A 00 00 01 5A 00 .X..@.:...Z...Z. 0x0020: 00 01 14 B4 14 B4 00 44 CC 0D 00 00 00 07 00 00 .......D........ 0x0030: 00 02 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 0x0040: 00 3C 00 00 00 00 3B D0 4C C9 00 00 00 01 3B D5 .<....;.L.....;. 0x0050: 91 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .8.............. 0x0060: 00 00 00 00 00 00 ...... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [**] MISC same SRC/DST [**] 10/23-11:52:10.266952 90.0.0.1:5301 -> 90.0.0.1:5301 UDP TTL:58 TOS:0x0 ID:53138 IpLen:20 DgmLen:88 DF Len: 68 0x0000: 08 00 20 E5 97 42 00 30 96 2D F5 FD 08 00 45 00 .. ..B.0.-....E. 0x0010: 00 58 CF 92 40 00 3A 11 BD 00 5A 00 00 01 5A 00 .X..@.:...Z...Z. 0x0020: 00 01 14 B5 14 B5 00 44 CC 0B 00 00 00 07 00 00 .......D........ 0x0030: 00 02 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 0x0040: 00 3C 00 00 00 00 3B D0 4C C9 00 00 00 01 3B D5 .<....;.L.....;. 0x0050: 91 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .8.............. 0x0060: 00 00 00 00 00 00 ...... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ -- V.Jay LaRosa EMC Corporation Systems Administrator 171 South Street (508)435-1000 ext 14957 Hopkinton, MA 01748 (508)497-8082 fax www.emc.com
Current thread:
- MISC same SRC/DST Vjay LaRosa (Oct 23)
- <Possible follow-ups>
- RE: MISC same SRC/DST Joshua Wright (Oct 24)