protocol 191?

From: Il Oh (iohat_private)
Date: Wed Jun 17 1998 - 07:56:50 PDT

  • Next message: Rob Kouwenberg: "Re : Bind 4.9.6 ~ Current | X86 Exploit"

    I've been looking over my cisco filter logs with a paranoid eye ever
    since named crashed on both my name servers.  It's actually been very
    educational.
    
    I saw something the other day that I haven't been able to get any
    information on.  It was a bunch of broadcast packets listed as protocol
    191.  RFC 1700 lists protocols 101-254 as "unassigned".
    
    There was a single broadcast packet for each of my class C networks.
    
    Does anyone have any information about this?
    
    Here are the entries from my log:
    
    Jun 10 00:41:21 shaft.wii.com 58878: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:22 shaft.wii.com 58879: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:23 shaft.wii.com 58880: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:24 shaft.wii.com 58881: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:25 shaft.wii.com 58882: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:25 shaft.wii.com 58883: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:27 shaft.wii.com 58884: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:27 shaft.wii.com 58885: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:29 shaft.wii.com 58886: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:29 shaft.wii.com 58887: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:31 shaft.wii.com 58888: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:32 shaft.wii.com 58889: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:34 shaft.wii.com 58890: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:35 shaft.wii.com 58891: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:36 shaft.wii.com 58892: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:38 shaft.wii.com 58894: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:41 shaft.wii.com 58895: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:42 shaft.wii.com 58896: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:44 shaft.wii.com 58897: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:44 shaft.wii.com 58898: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:45 shaft.wii.com 58899: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:46 shaft.wii.com 58900: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:47 shaft.wii.com 58901: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:49 shaft.wii.com 58902: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:49 shaft.wii.com 58903: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:50 shaft.wii.com 58904: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:51 shaft.wii.com 58905: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    Jun 10 00:41:53 shaft.wii.com 58906: %SEC-6-IPACCESSLOGNP: list 101 denied
    191 <source> -> <dest>, 1 packet
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:58:37 PDT