11-29-2001 09:25 AM - edited 03-08-2019 09:18 PM
I have a 2600 router, the show queue serial 0/1, showme this kind of traffic:
Packet 5, linktype: ip, length: 85, flags: 0x8
source: 62.239.56.32, destination: 96.33.177.203, id: 0x747E, ttl: 84, prot: 1
53
data: 0x69CB 0xEBFF 0xB701 0xA391 0x5FEC 0xB945 0x42F1
0x697B 0x6847 0xDFEC 0x206A 0xEB84 0x62B7 0x3310
Packet 6, linktype: ip, length: 9, flags: 0x10000088
source: 58.30.22.13, destination: 8.130.23.142, id: 0x834C, ttl: 127,
TOS: 0 prot: 6, source port 3709, destination port 1352
data: 0x0E7D 0x0548 0x0165 0x75CC 0x0172 0xA92E 0x5018
0x1E32 0x4F3B 0x0000 0x1DEE 0xF76A 0xCD1E 0x7C60
Packet 7, linktype: ip, length: 85, flags: 0x8
source: 76.64.0.127, destination: 6.216.234.158, id: 0x7608, ttl: 0, prot: 5
data: 0x67B1 0xFDD2 0x8FEE 0x1797 0xDE0F 0x62F0 0xDB76
0x5D38 0x6CD5 0x613E 0x6865 0xDD22 0x0B77 0x7CDD
Packet 8, linktype: ip, length: 85, flags: 0x8
source: 103.123.239.149, destination: 242.228.199.30, id: 0x77E6, ttl: 5, prot
: 73
This source address there are not in my network.
Somebody Knows what kind of attack I have.
12-07-2001 06:54 AM
It looks like it may be a smurf attack. Heres some help http://www.cisco.com/warp/public/707/22.html
12-13-2001 04:36 PM
If it's a smurf attack, is not one of the well-know attack.
Any idea??
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide