how to decode the complex acl

Unanswered Question
Sep 26th, 2008
User Badges:
  • Silver, 250 points or more

i am getting packets from the given source and destination. Can some one tell me how to decode it so that i can get the list of ip addresses.


source=0.27.129.1 destination=0.50.8.0


regards

shivlu

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Giuseppe Larosa Thu, 10/02/2008 - 10:46
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Shivlu,

I may be wrong but I don't see anything that needs to be further decoded here.


I agree these are strange IP addresses that shouldn't be seen in a network.


try to understand if these packets are real look for ARP entries and try to locate the devices that are using them.


Just an idea: they could be the result of two IPv6 hosts trying to auto-tunnel over IPv4 addresses and using the least significant part of IPv6 address as the IPv4 address.


Hope to help

Giuseppe


Actions

This Discussion