North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: routing invalid IP addresses

  • From: Geo.
  • Date: Sat Feb 21 22:26:02 2004 
>     Anybody hook up a new Macintosh lately?  OS X seems to spew traffic in
> that range.  It appears to be some optional component as they don't all do
> it, about half of ours do it.  I haven't cared enough to track down what
> exactly is doing it.

Not on this segment, only two linux boxes directly on the wire and two NT
boxes behind a Pix 506e. Whatever was going on has stopped now so I'm just
going from log fragments the admins are emailing me. It looks like someone
was trying to exploit apache/php on one of the linux boxes using spoofed udp
from that IP address I posted.

Geo.