Server nahle zacal prijimat pakety, ktere mu nepatri

[Stepan Roh]

On Fri, 5 Aug 2005, Pavel Kankovsky wrote:

> On Fri, 5 Aug 2005, Stepan Roh wrote:
>
>> 15:18:10.192445 00:00:ca:f5:76:27 > ff:ff:ff:ff:ff:ff, ethertype IPv4
>> (0x0800),length 418: 61.175.164.50.2315 > 86.49.13.194.1434: UDP, length
>> 376
>>
>> 15:18:32.324060 00:00:ca:f5:76:27 > ff:ff:ff:ff:ff:ff, ethertype IPv4
>> (0x0800),length 78: 222.232.18.185.4807 > 86.49.11.140.139: S
>> 3657899717:3657899717(0) win 53760 <mss 1460,nop,wscale
>> 3,nop,nop,timestamp 0 0,nop,nop,sackOK>
>>
>> Podivuhodne mi pripadaji, protoze jsou to ethernet broadcasty (mam pravdu,
>> ze?) s pakety z Ciny a Koreje, coz urcite neni cast UPC.
>
> Cilove adresy jsou ale UPC, ne? Jinak ty pakety uz od pohledu smrdi, ten
> kdo je poslal, nejspis nemel pratelske umysly.

Ano, jsou to UPC adresy. Jen me nenapadlo, ze jde dostat ethernetovy 
broadcast skrz gateway.

>> Jako odesilaci MAC adresa je vzdy 00:00:ca:f5:76:27, coz je MAC adresa
>> defaultni gateway pro moji podsit (86.49.11.1, moje IP je 86.49.11.245,
>> maska 255.255.255.0). To by me zajimalo, proc rozesila takoveto
>> broadcasty.
>
> Zrejme se tamni gateway zcvokla. Jestli sama od sebe, nebo ji nekdo
> pomohl (treba nejakym ARP spoofingem), to uz je otazka...

Hm. Asi to oznamim UPC, snad v tom jejich klpoz formulari najdu patricnou 
kategorii :-). Diky moc.

S pozdravem,

Stepan Roh