From owner-freebsd-hackers Wed Nov 15 23:51:28 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from relay1.bcs.zp.ua (bcs-zyx-eth.marka.net.ua [195.248.171.202]) by hub.freebsd.org (Postfix) with ESMTP id 4530537B479 for ; Wed, 15 Nov 2000 23:51:23 -0800 (PST) Received: (from eugen@localhost) by relay1.bcs.zp.ua (8.11.0/8.11.0) id eAG7oSO13677; Thu, 16 Nov 2000 09:50:28 +0200 (EET) Date: Thu, 16 Nov 2000 09:50:28 +0200 (EET) Message-Id: <200011160750.eAG7oSO13677@relay1.bcs.zp.ua> From: Eugene Polovnikov To: remy@boostworks.com Cc: hackers@freebsd.org Subject: Re: Any known issue about icmp replies ? X-Newsgroups: bcs.Gated.FreeBSD-Hackers In-Reply-To: <200011152322.AAA18010@luxren2.boostworks.com> User-Agent: tin/1.4.1-19991201 ("Polish") (UNIX) (FreeBSD/3.4-RELEASE (i386)) Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Are you sure that your system isn't hacked/cracked ? Content of packets look strange for me. In article <200011152322.AAA18010@luxren2.boostworks.com> you wrote: > Hello, > It seems that some Linux distribs are on trouble with icmp replies that > get replied (see below). My question is: is there any known issue on > FreeBSD getting an icmp reply and responding by another icmp reply ? > (Guess not but better be sure). > Exemple: > 00:10:37.305915 33.85.11.rrcentralflorida.cfl.rr.com > luxufr12.boostworks.com: > icmp: echo reply (ttl 43, id 22520) > 0000: 45 00 04 14 57 F8 00 00 2B 01 D0 FC 41 21 55 0B E...W...+...A!U. > 0010: D4 9B F8 2C 00 00 9C A3 1A 0A 00 00 00 00 00 00 ...,............ > 0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > 0030: 73 6B 69 6C 6C 7A 00 00 00 00 00 00 00 00 00 00 skillz.......... > 0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > .. > 0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > 0410: 00 00 00 00 ED .... > 00:10:37.338329 luxufr12.boostworks.com > 33.85.11.rrcentralflorida.cfl.rr.com: > icmp: echo reply (ttl 63, id 1063) > 0000: 45 00 04 14 04 27 00 00 3F 01 10 CE D4 9B F8 2C E....'..?......, > 0010: 41 21 55 0B 00 00 B6 B1 1A 0B 00 00 00 00 00 00 A!U............. > 0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > 0030: 66 69 63 6B 65 6E 00 00 00 00 00 00 00 00 00 00 ficken.......... > 0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > .. > 0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ > 0410: 00 00 00 00 ED .... > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message