Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Apr 1998 18:47:25 -0700 (PDT)
From:      Archie Cobbs <archie@whistle.com>
To:        rotel@indigo.ie
Cc:        mt@folco.lms.ru, freebsd-security@FreeBSD.ORG
Subject:   Re: New DoS attack?
Message-ID:  <199804220147.SAA04232@bubba.whistle.com>
In-Reply-To: <199804211132.MAA00823@indigo.ie> from Niall Smart at "Apr 21, 98 12:32:02 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Niall Smart writes:
> Could you (anyone?) dump all packets coming from/going to port 0 using tcpdump
> and send me any logs?  I'm not sure if this means you'll have to turn off the
> ipfw rule, I don't know at what stage the packets get filtered.

FYI- tcpdump and ipfw work completely independently of each other,
so even if a packet is dropped you will see it first via tcpdump.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199804220147.SAA04232>