[Nottingham] Weird Stuff

Robert Davies nottingham at mailman.lug.org.uk
Fri Sep 6 19:21:01 2002


On Friday 06 September 2002 15:57, you wrote:
> On Fri, 6 Sep 2002, Guangyue Liu wrote:
> > I happened to check the log of my router today and found loads of
> > entries like the following.
> > Sep  6 13:28:16 gw kernel: Packet log: input REJECT eth0 PROTO=17
> > 10.144.103.254:
> > 67 255.255.255.255:68 L=328 S=0x00 I=10445 F=0x0000 T=255 (#4)
>
> You're on an NTL cable modem. Several thousand other people are on the
> same network, and they're all using DHCP or BOOTP for addresses.
>
> That's just a DHCP client broadcasting for a server. It can be ignored -
> better to do so, as it'll clutter up your logs :)

What's going to happen when someone injects packets destination 
255.255.255.255 from source 255.255.255.255 into NTL's network on a variety 
of ports likely to have hosts responding?  Surely they have no business 
routing this traffic.

It's fun enough on dialup when you get a rare '.255' address doled out to 
you, you get to see how many chatty 'doze PCs are out there.

Rob