Vulnerability Development: Re: Synaptics TouchPad, strange packets.

[Anthony Kim <Anthony.Kim () vw com>]

On Tue, Nov 27, 2001, Valerio B. wrote:

[snip]
> Connection origin : local initiated
> Protocol :  UDP
> Local Address :  xxx.xx.xxx.xxx
> Local Port :  17697
> Remote Name :
> Remote Address : xxx.xxx.xxx.x
> Remote Port :   65280
>
> Ethernet packet details:
> Ethernet II (Packet Length: 64)
>  Destination:  xx-xx-xx-xx-xx-xx
>  Source:  xx-xx-xx-xx-xx-xx
> Type: IP (0x0800)
[snip]
> Binary dump of the packet:
> 0000:  xx xx xx xx xx xx xx xx : xx xx xx xx 08 00 45 00 |  SRC..DEST....E.
> 0010:  00 32 9D D3 00 45 80 11 : EB F8 D4 0F A2 F0 C1 A6 | .2...E..........
> 0020:  78 03 45 21 FF 00 96 6D : F9 52 B9 57 29 C8 0A B9 | x.E!...m.R.W)...
> 0030:  04 60 E6 99 54 48 B4 1A : 00 4A 28 03 FF D9 FF FF | .`..TH...J(.....
> ******************************************
Just an FYI. You xx'd out the Ethernet addresses but left the IP
addresses in the hex dump. 212.15.162.240 is your source IP
and your destination 193.166.120.3. If you make the effort, might
as well go the last mile.

With regard to Synoptics Touchpad, how did you come to the determination
this was the source of your packets?

-- 
/*
 * Anthony Kim
 */