Re: Odd Increase in Malformed Packets Aimed at Port 0
Jose Nazario <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <[email protected]> |
could be fragmented traffic. can you secure a tcpdump log of the traffic? that will reveal more attributes of the traffic than the firewall logs you shared. another poster here was discussing a recent spike in fragmented UDP traffic, too. ________ jose nazario, ph.d. [email protected] http://monkey.org/~jose/ http://infosecdaily.net/ http://www.wormblog.com/