Home page logo
/

pauldotcom logo PaulDotCom mailing list archives

TCP protocol decimal type 210
From: mmcgrew1 at mail.csuchico.edu (Michael McGrew)
Date: Mon, 22 Jun 2009 02:08:36 -0700

210. seems allocated to me.
http://www.iana.org/assignments/ipv4-address-space/ lists it as
allocated. Proven by some nmap pings,
nmap -sP -vvvv 210.214.208.0/24

Host segment-210-214-208-249.maa.sify.net (210.214.208.249) is up
(0.27s latency).
Host segment-210-214-208-250.maa.sify.net (210.214.208.250) is up
(0.27s latency).

So there are some boxes out there on 210. If you don't mind, what is
the full IP? Can you do some more research and find out what port it's
using? Or run some tcpdump against it.


On Sun, Jun 21, 2009 at 10:33 PM, Dale Stirling<dale at puredistortion.com> wrote:
Hi All,

I have a box that is routinely using in excess of 4GB a day in traffic in
from the internet.

I have identified that the traffic is coming to the box via an IP Protocol
number I have never seen before: 210.

I have done some searching on the Internet and have only been able to find
that this number is in the unassigned block of protocol numbers with IANA. I
am stuck so I thought I would through it out to the smartest group of people
I know the PDC Mailing (I heard flatery works well) list to see if any one
has seen this before.

Cheers,
Dale

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault