[6987] in bugtraq
protocol 191?
daemon@ATHENA.MIT.EDU (Il Oh)
Thu Jun 18 13:31:35 1998
Date: Wed, 17 Jun 1998 07:56:50 -0700
Reply-To: Il Oh <ioh@WII.COM>
From: Il Oh <ioh@WII.COM>
To: BUGTRAQ@NETSPACE.ORG
I've been looking over my cisco filter logs with a paranoid eye ever
since named crashed on both my name servers. It's actually been very
educational.
I saw something the other day that I haven't been able to get any
information on. It was a bunch of broadcast packets listed as protocol
191. RFC 1700 lists protocols 101-254 as "unassigned".
There was a single broadcast packet for each of my class C networks.
Does anyone have any information about this?
Here are the entries from my log:
Jun 10 00:41:21 shaft.wii.com 58878: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:22 shaft.wii.com 58879: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:23 shaft.wii.com 58880: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:24 shaft.wii.com 58881: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:25 shaft.wii.com 58882: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:25 shaft.wii.com 58883: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:27 shaft.wii.com 58884: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:27 shaft.wii.com 58885: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:29 shaft.wii.com 58886: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:29 shaft.wii.com 58887: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:31 shaft.wii.com 58888: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:32 shaft.wii.com 58889: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:34 shaft.wii.com 58890: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:35 shaft.wii.com 58891: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:36 shaft.wii.com 58892: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:38 shaft.wii.com 58894: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:41 shaft.wii.com 58895: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:42 shaft.wii.com 58896: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:44 shaft.wii.com 58897: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:44 shaft.wii.com 58898: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:45 shaft.wii.com 58899: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:46 shaft.wii.com 58900: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:47 shaft.wii.com 58901: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:49 shaft.wii.com 58902: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:49 shaft.wii.com 58903: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:50 shaft.wii.com 58904: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:51 shaft.wii.com 58905: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:53 shaft.wii.com 58906: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
