Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Nov 2000 09:50:28 +0200 (EET)
From:      Eugene Polovnikov <eugen@bcs.zp.ua>
To:        remy@boostworks.com
Cc:        hackers@freebsd.org
Subject:   Re: Any known issue about icmp replies ?
Message-ID:  <200011160750.eAG7oSO13677@relay1.bcs.zp.ua>
In-Reply-To: <200011152322.AAA18010@luxren2.boostworks.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Are you sure that your system isn't hacked/cracked ?
Content of packets look strange for me.

In article <200011152322.AAA18010@luxren2.boostworks.com> you wrote:
> Hello,

> It seems that some Linux distribs are on trouble with icmp replies that
> get replied (see below). My question is: is there any known issue on
> FreeBSD getting an icmp reply and responding by another icmp reply ?
> (Guess not but better be sure).

> Exemple:

> 00:10:37.305915 33.85.11.rrcentralflorida.cfl.rr.com > luxufr12.boostworks.com: 
> icmp: echo reply (ttl 43, id 22520)

>   0000: 45 00 04 14 57 F8 00 00  2B 01 D0 FC 41 21 55 0B  E...W...+...A!U.
>   0010: D4 9B F8 2C 00 00 9C A3  1A 0A 00 00 00 00 00 00  ...,............
>   0020: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
>   0030: 73 6B 69 6C 6C 7A 00 00  00 00 00 00 00 00 00 00  skillz..........
>   0040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
> ..
>   0400: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
>   0410: 00 00 00 00 ED                                    ....

> 00:10:37.338329 luxufr12.boostworks.com > 33.85.11.rrcentralflorida.cfl.rr.com: 
> icmp: echo reply (ttl 63, id 1063)

>   0000: 45 00 04 14 04 27 00 00  3F 01 10 CE D4 9B F8 2C  E....'..?......,
>   0010: 41 21 55 0B 00 00 B6 B1  1A 0B 00 00 00 00 00 00  A!U.............
>   0020: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
>   0030: 66 69 63 6B 65 6E 00 00  00 00 00 00 00 00 00 00  ficken..........
>   0040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
> ..
>   0400: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
>   0410: 00 00 00 00 ED                                    ....





> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-hackers" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200011160750.eAG7oSO13677>