Server nahle zacal prijimat pakety, ktere mu nepatri

Peter Surda surda na shurdix.com
Pátek Srpen 5 16:10:13 CEST 2005


On Fri, 5 Aug 2005 15:40:43 +0200 (CEST) Stepan Roh <stepan na srnet.cz> wrote:

>15:18:10.192445 00:00:ca:f5:76:27 > ff:ff:ff:ff:ff:ff, ethertype IPv4
>(0x0800),length 418: 61.175.164.50.2315 > 86.49.13.194.1434: UDP, length
>376
>
>15:18:32.324060 00:00:ca:f5:76:27 > ff:ff:ff:ff:ff:ff, ethertype IPv4
>(0x0800),length 78: 222.232.18.185.4807 > 86.49.11.140.139: S
>3657899717:3657899717(0) win 53760 <mss 1460,nop,wscale
>3,nop,nop,timestamp 0 0,nop,nop,sackOK>
To je potom jasne, router provajdera si mysli, ze 86.49.13.194 a 86.49.11.140 je
broadcast (a mozno ma pravdu).

Port 1434 UDP je nejaky MS server a pouzivaju to napr. cervy, 139 je NetBIOS a
tiez to moze byt cerv alebo blbo nakonfigurovany client.

>To by me zajimalo, proc rozesila takoveto broadcasty.
Client nevie, ze je to broadcast, a router si mysli, ze hej.

>Nezda se mi to korektni.
No na nete je tolko ****** ze by som si z toho tazku hlavu nerobil.

>Stepan Roh
S pozdravom,
Peter Surda

-- 
http://www.shurdix.org - Linux distribution for routers and firewalls


Další informace o konferenci Linux