Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Full QUEUE in a 2600 router

I have a 2600 router, the show queue serial 0/1, showme this kind of traffic:

Packet 5, linktype: ip, length: 85, flags: 0x8

source: 62.239.56.32, destination: 96.33.177.203, id: 0x747E, ttl: 84, prot: 1

53

data: 0x69CB 0xEBFF 0xB701 0xA391 0x5FEC 0xB945 0x42F1

0x697B 0x6847 0xDFEC 0x206A 0xEB84 0x62B7 0x3310

Packet 6, linktype: ip, length: 9, flags: 0x10000088

source: 58.30.22.13, destination: 8.130.23.142, id: 0x834C, ttl: 127,

TOS: 0 prot: 6, source port 3709, destination port 1352

data: 0x0E7D 0x0548 0x0165 0x75CC 0x0172 0xA92E 0x5018

0x1E32 0x4F3B 0x0000 0x1DEE 0xF76A 0xCD1E 0x7C60

Packet 7, linktype: ip, length: 85, flags: 0x8

source: 76.64.0.127, destination: 6.216.234.158, id: 0x7608, ttl: 0, prot: 5

data: 0x67B1 0xFDD2 0x8FEE 0x1797 0xDE0F 0x62F0 0xDB76

0x5D38 0x6CD5 0x613E 0x6865 0xDD22 0x0B77 0x7CDD

Packet 8, linktype: ip, length: 85, flags: 0x8

source: 103.123.239.149, destination: 242.228.199.30, id: 0x77E6, ttl: 5, prot

: 73

This source address there are not in my network.

Somebody Knows what kind of attack I have.

2 REPLIES
Silver

Re: Full QUEUE in a 2600 router

It looks like it may be a smurf attack. Here’s some help http://www.cisco.com/warp/public/707/22.html

New Member

Re: Full QUEUE in a 2600 router

If it's a smurf attack, is not one of the well-know attack.

Any idea??

159
Views
0
Helpful
2
Replies
CreatePlease login to create content