Re: strange packets on my interface

From: NeoSadist (neosad1st_at_charter.net)
Date: 01/22/04


Date: Wed, 21 Jan 2004 19:20:35 -0700

AR wrote:

> Anyone know what this mean... My IP is completly diferent from
> 194.249.38.255. Why is this on my interface???
>
> Wed Jan 14 12:33:27 2004; UDP; eth0; 140 bytes; from
> cmb8-158.dial-up.arnes.si:1322 to 194.249.38.255:39213 Wed Jan 14 12:33:28

<SNIP>
First off, these are you your network over the broadcast IP, which means
some machine is spraying the LAN with tons of UDP (which is a
fire-and-forget kind of thing). I suggest you figure out where they're
coming from, as some machine on your LAN is doing it, in my opinion. This
could be some machine being infected with a trojan/worm/virus of some sort.

-- 
The penalty for laughing in a courtroom is six months in jail; if it
were not for this penalty, the jury would never hear the evidence.
                -- H. L. Mencken