Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Security Incidents: Some kind of DoS killing a fastethernet interface

Some kind of DoS killing a fastethernet interface

From: Bjorn Djupvik <Bjorn.Djupvik_at_GLOBALONE.NET>
Date: Mon, 8 Jan 2001 08:55:17 +0100

Hi. I recently received these messages in a syslog (on the machine "somebox"). It's obviously some kind of DoS, but I`m
trying to figure out what kind. The syslog port was open so I`m guessing this is some kind of UDP flood to random ports,
thereby hitting the syslog port. Comments?

Cheers
Bjorn

-----------------------------------------------------------------------------
Jan 8 02:58:59 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 02:58:59 somebox kernel: resetting ledma
Jan 8 02:59:10 cs2756-148.austin.rr.com
!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)
Jan 8 03:00:35 24.130.172.19
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Jan 8 03:00:24 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:00:24 somebox kernel: resetting ledma
Jan 8 03:01:04 cc849766-a.taylor1.mi.home.com
!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:01:54 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:01:54 somebox kernel: resetting ledma
Jan 8 03:02:19 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:02:19 somebox kernel: resetting ledma
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:22 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:59 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:02:59 somebox kernel: resetting ledma
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:03:50 nic-25-c108-026.mn.mediaone.net
!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)
Jan 8 03:07:24 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:07:24 somebox kernel: resetting ledma
Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:07:25 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:07:28 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:08:19 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:08:19 somebox kernel: resetting ledma
Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:14:29 somebox kernel: eth0: transmit timed out, status 007b, reset
Jan 8 03:14:29 somebox kernel: resetting ledma
Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying TPE
Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying AUI
Jan 8 03:14:30 somebox kernel: eth0: Carrier Lost, trying TPE

Received on Jan 08 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos