RV: packets in my network

From: Sergio Candelas Noriega (sergio.candelas@grupobbva.com)
Date: 09/26/01 

From: "Sergio Candelas Noriega" <sergio.candelas@grupobbva.com>
To: <incidents@securityfocus.com>
Subject: RV: packets in my network
Date: Wed, 26 Sep 2001 09:42:11 +0200
Message-ID: <BNEPIIBBPMMHHCBCACAJIEGHCCAA.sergio.candelas@grupobbva.com>

First of all.
hello everybody, and sorry about my english.
while i was sniffing in my local network , i saw that my computer was
sending this kind of packet:

GET
http://www.cms1.net/scripts/cms/CmsInit.ASP?ID=200101&D2=xA%3F%3F%3F%3F%40%3
FK%3F%40%3F%3F%3F%3FK%3F%3F%3F%3F%3F%3F%3F%3F%3F&AW=247&LV=3209&CU=19277765
HTTP/1.0
Accept: image/gif, image/x-windows-bmp, image/jpeg, application/x-html, */*

www.cms1.net is not responding but the address above returns this:

DATA_OK W_INT [C=33][V=1927776] W_INT [C=34][V=1001423085] W_STR
[C=96][V=1001423085] W_STR [C=90][V=]

do you know what it could be???

thanks
Sergio.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • RE sniffing plaintext protocols
    ... Is this only in a local network possible or also in the Internet? ... The packets have to pass through your PC for them to be read, ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: Iptables port 5353 -
    ... Logged 63 packets on interface eth0 ... Therefor you probably have an active mDNS server instance which announces your machine throughout the local network. ...
    (Fedora)
  • Re: Iptables port 5353 -
    ... Logged 63 packets on interface eth0 ... DNS on your local network, you can continue to drop/ignore the ... an active mDNS server instance which announces your machine ...
    (Fedora)
  • Re: Spoofing IP Addresses when sending emails
    ... configuring his router to reject packets coming from the outside world which have a source address that belongs to the local network. ... i'd double-check my assumption that the packets really aren't coming from a local machine. ... My ISP has used SSL for a long time to ID customers connecting to it's email server. ...
    (comp.lang.java.programmer)
  • PF teething problems
    ... I'm informed that PF is blocking a lot of dubious packets ... from the Internet. ... interface (from local network machines). ...
    (comp.unix.bsd.freebsd.misc)