[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Strange packets



Hi,

one of our machines ("office") was suddenly causing a *real* lot of
strange traffic, causing quite some costs. Tcpdump showed the
following output. I'd be happy about any explanation. Is this some
sign of attack? I did not find the IP number 62.236.92.1 in any logfile.


Thanks,

Jochen


13:53:46.171012 office > 62.236.92.1: (frag 35482:1480@38480+)
13:53:46.171012 office > 62.236.92.1: (frag 35482:1480@37000+)
13:53:46.171012 office > 62.236.92.1: (frag 35482:1480@35520+)
13:53:46.171012 office > 62.236.92.1: (frag 35482:1480@34040+)
13:53:46.171012 office > 62.236.92.1: (frag 35482:1480@32560+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@31080+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@29600+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@28120+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@26640+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@25160+)
13:53:46.181012 office > 62.236.92.1: (frag 35482:1480@23680+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@22200+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@20720+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@19240+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@17760+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@16280+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@14800+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@13320+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@11840+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@10360+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@8880+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@7400+)
13:53:46.191012 office > 62.236.92.1: (frag 35482:1480@5920+)
13:53:46.201012 office > 62.236.92.1: (frag 35482:1480@4440+)
13:53:46.201012 office > 62.236.92.1: (frag 35482:1480@2960+)
13:53:46.201012 office > 62.236.92.1: (frag 35482:1480@1480+)
13:53:46.201012 office > 62.236.92.1: icmp: echo request (frag
35482:1480@0+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1368@63640)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@62160+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@60680+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@59200+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@57720+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@56240+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@54760+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@53280+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@51800+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@50320+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@48840+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@47360+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@45880+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@44400+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@42920+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@41440+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@39960+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@38480+)
13:53:46.221012 office > 62.236.92.1: (frag 35483:1480@37000+)
13:53:46.241012 office > 62.236.92.1: (frag 35483:1480@31080+)
13:53:46.241012 office > 62.236.92.1: (frag 35483:1480@29600+)

-- 
Jochen Wiedmann						joe@ispsoft.de
How come the .45 is the worlds only functional		+49 7123 14887
point and click interface? (Alan Cox)


Reply to: