cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
629
Views
0
Helpful
2
Replies

Full QUEUE in a 2600 router

lxaguila
Level 1
Level 1

I have a 2600 router, the show queue serial 0/1, showme this kind of traffic:

Packet 5, linktype: ip, length: 85, flags: 0x8

source: 62.239.56.32, destination: 96.33.177.203, id: 0x747E, ttl: 84, prot: 1

53

data: 0x69CB 0xEBFF 0xB701 0xA391 0x5FEC 0xB945 0x42F1

0x697B 0x6847 0xDFEC 0x206A 0xEB84 0x62B7 0x3310

Packet 6, linktype: ip, length: 9, flags: 0x10000088

source: 58.30.22.13, destination: 8.130.23.142, id: 0x834C, ttl: 127,

TOS: 0 prot: 6, source port 3709, destination port 1352

data: 0x0E7D 0x0548 0x0165 0x75CC 0x0172 0xA92E 0x5018

0x1E32 0x4F3B 0x0000 0x1DEE 0xF76A 0xCD1E 0x7C60

Packet 7, linktype: ip, length: 85, flags: 0x8

source: 76.64.0.127, destination: 6.216.234.158, id: 0x7608, ttl: 0, prot: 5

data: 0x67B1 0xFDD2 0x8FEE 0x1797 0xDE0F 0x62F0 0xDB76

0x5D38 0x6CD5 0x613E 0x6865 0xDD22 0x0B77 0x7CDD

Packet 8, linktype: ip, length: 85, flags: 0x8

source: 103.123.239.149, destination: 242.228.199.30, id: 0x77E6, ttl: 5, prot

: 73

This source address there are not in my network.

Somebody Knows what kind of attack I have.

2 Replies 2

a-vazquez
Level 6
Level 6

It looks like it may be a smurf attack. Here’s some help http://www.cisco.com/warp/public/707/22.html

If it's a smurf attack, is not one of the well-know attack.

Any idea??