attempting to troubleshoot for customer

This little poor thing looks just odd. When you take a closer look, you will
see that port numbers and other TCP parameters of this packet are
actually... constructed of what should be the packet payload! Source port
and destination port, two 2-byte values that start every TCP header, are
18245 and 28261 - 0x4745, 0x5420 in network endian order. This translates to
ASCII string 'GET ', a beginning of a HTTP request. This kid has lost its
TCP header, but IP header (with protocol type set to TCP) and TCP payload
are still there... We started to see thousands of packets just like this one
somewhere in the middle of 2000, coming from many locations in Poland. After
some time, we realized that all were generated by a badly broken Nortel CVX
access servers deployed country-wide by the Polish Telecom. Firmware was
fixed within a month or so, but this priceless packet dump will live
forever.


.

Relevant Pages

  • Re: Windows ControlAd experience this morning
    ... TCP non-syn/non-ack packet on invalid connection. ... TCP Destination Port: 3665. ... OrgTechName: Network Operations ...
    (alt.computer.security)
  • alt.2600 FAQ Revision .014 (2/4)
    ... One type of firewall is the packet filtering firewall. ... Dropping packets instead of rejecting them greatly increases the time required to scan your network. ... Port scanning UDP ports is much slower than port scanning TCP ports. ... Chartreuse Use the electricity from your phone line Cheese Connect two phones to create a diverter Chrome Manipulate Traffic Signals by Remote Control ...
    (alt.2600)
  • Re: UDP catchall
    ... This is a kind of port knocking. ... Thanks to TCP ... If an RST packet is generated in response to the first TCP SYN packet, ... there might be no retransmission as the sender would think the TCP ...
    (freebsd-net)
  • Re: TCP/IP Services SSH and new router difficulties
    ... (TCP vs UDP, role of routers, significance of MTU, etc). ... the lost packet and what followed it is retransmitted. ... I'd start by looking to see whether you have a Path MTU Discovery ... VMS TCP/IP SSH ports budge? ...
    (comp.os.vms)
  • Re: Problem with Port forwarding, NATD and IPFW
    ... You need some more knowledge to understand how TCP works. ... sender, port of sender, receiver, port of receiver. ... So there will be never a packet matching to this rule. ... Back to your problem with natd. ...
    (comp.unix.bsd.freebsd.misc)