Някой floodи БТК ???

[jbmmm]

Пичове, имате ли странен трафик в АДСЛ мрежата от ПС с IP Addr 212.39.89.49 и MAC 000F3588AC00 броадкаст пакети ?

[DeathKnight]

Sniff-ни трафика с ethereal и прати логовете.

[jbmmm]

Вече спря, ама е нещо от сорта:


----- Packet Details -----
----- General Information -----
Item number 1, position in dumpfile 0%
Item type: Partial frame, 564 bytes available
Frame size is 564 (234x) bytes
Timestamp: 15h:08m:32s:835241us
----- Ethernet v.2.0 MAC Header ----- [0-13]
Destination = Multicast 01005E-010205 (Universal; Type: DoD Internet Multicast (RFC-1112)) - [0-13]
Source = Computer 000F35-88AC00 (Universal; Vendor: ???) - [6-11]
Ethertype = 0800h (DOD Internet Protocol (IP) Xerox) - [12-13]
----- IPv4 Header ----- [14-33]
Version = 4 - {14-14}
Header length = 24 bytes - {14-14}
Type of service = C0h - [15-15]
110. .... = priority 6: internetwork control - {15-15}
...0 .... = normal delay - {15-15}
.... 0... = normal throughput - {15-15}
.... .0.. = normal reliability - {15-15}
.... ..0. = normal monetary cost - {15-15}
.... ...0 = Reserved bit, for future usage, which has to be 0 - {15-15}
Total length = 32 bytes - [16-17]
Identification = 0 - [18-19]
Flags = 0h - {20-20}
0... .... = must be 0 - {20-20}
.0.. .... = may fragment - {20-20}
..0. .... = last fragment - {20-20}
Fragment offset = 0 bytes - {20-21}
Time to live = 1 seconds/hops - [22-22]
Protocol = 2 (IGMP [Internet Group Management]) - [23-23]
Header checksum = 13B9h - [24-25]
Source address = [212.39.89.49] - [26-29]
Destination address = [225.1.2.5] - [30-33]
No IP options - [14-14]
----- NOT SUPPORTED ----- [38-563]
[526 byte(s) of data]
==========================================================================
* 01 00 5E 01 | 02 05 00 0F | 35 88 AC 00 | 08 00 46 C0 [..^.....5.....F.]
* 00 20 00 00 | 00 00 01 02 | 13 B9 D4 27 | 59 31 E1 01 [. .........'Y1..]
* 02 05 94 04 | 00 00 11 0A | 0B EF E1 01 | 02 05 00 00 [................]
* 00 00 00 00 | 00 00 00 00 | 00 00 00 00 | 82 56 90 0E [.............V..]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 | 1C DF 44 21 [..D!..D!..D!..D!]
* 1C DF 44 21 | | | [..D!]

###############################################################

----- Packet Details -----
----- General Information -----
Item number 2, position in dumpfile 0%
Item type: Partial frame, 576 bytes available
Frame size is 576 (240x) bytes
Timestamp: 15h:08m:32s:845822us
----- Ethernet v.2.0 MAC Header ----- [0-13]
Destination = Multicast 01005E-010205 (Universal; Type: DoD Internet Multicast (RFC-1112)) - [0-13]
Source = Computer 000F35-88AC00 (Universal; Vendor: ???) - [6-11]
Ethertype = 0800h (DOD Internet Protocol (IP) Xerox) - [12-13]
----- IPv4 Header ----- [14-33]
Version = 4 - {14-14}
Header length = 24 bytes - {14-14}
Type of service = C0h - [15-15]
110. .... = priority 6: internetwork control - {15-15}
...0 .... = normal delay - {15-15}
.... 0... = normal throughput - {15-15}
.... .0.. = normal reliability - {15-15}
.... ..0. = normal monetary cost - {15-15}
.... ...0 = Reserved bit, for future usage, which has to be 0 - {15-15}
Total length = 32 bytes - [16-17]
Identification = 0 - [18-19]
Flags = 0h - {20-20}
0... .... = must be 0 - {20-20}
.0.. .... = may fragment - {20-20}
..0. .... = last fragment - {20-20}
Fragment offset = 0 bytes - {20-21}
Time to live = 1 seconds/hops - [22-22]
Protocol = 2 (IGMP [Internet Group Management]) - [23-23]
Header checksum = 13B9h - [24-25]
Source address = [212.39.89.49] - [26-29]
Destination address = [225.1.2.5] - [30-33]
No IP options - [14-14]
----- NOT SUPPORTED ----- [38-575]
[538 byte(s) of data]