Re: Please help with the following log.

From: Alex (DONOTREPLY_at_ATcomcastDOTnet)
Date: 01/04/04 

Date: Sun, 4 Jan 2004 16:31:54 -0500

Thanks.
I am using hardware router/firewall SMC7004VBR. Unfortunately, it does not
display MAC addresses. Let me correct something I stated earlier. It is not
the actual website. It occurs when I click on any of the buttons on the
website("support" - for example). It looks like it is trying to invoked
index1.jsp (Java Script - I assume). Could this have anything to do with
WindowsXP Service Pack 1 and Sun's JAVA rte? It does not happen on
Windows98SE which uses Microsoft's VM.

"Charter" <neosad1st@charter.net> wrote in message
news:vvgupj9ia2ehab@corp.supernews.com...
> Alex wrote:
>
> > Time: 01/04/2004, 02:42:10
> >
> > Message: SYN Flood to Host
> >
> > Source: 192.168.X.X, 1861
> >
> > Destination:YYY.YYY.YYY.YYY, 80 (from WAN Outbound)
> >
> >
> >
> > This happens when I try to load, using internet explorer, a USA based
web
> > site of very well known camera/printer/copier company(sounds like an
> > artillery weapon).
>
> First off, do you use a software firewall? Do you use a hardware firewall
> (rotuer)? Look at all the mac addresses from all computers on your LAN at
> home, and your modem and router as well if you have one of those. Check
it
> against those mac addresses and if the mac address is on your LAN, you
will
> then know where it's coming from. If the mac address is NOT on your LAN,
> it's coming from somewhere out on the internet. Do that first.
>
> > Why does it have my local IP address as a source.
> > Does it mean my WindowsXP PC is causing the Syn Flood attack.
>
> Maybe, maybe not, because your firewall could be malfunctioning...
>
> > It only
> > happens to this website. What is weird is that sometimes it works and
the
> > website loads correctly. Also, my other Windows 98SE PCs don't
expirience
> > same problem.
> >
> > Thanks.
>
> --
> Bowie's Theorem:
> If an experiment works, you must be using the wrong equipment.
>

Loading