cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
547
Views
0
Helpful
2
Replies

Full QUEUE in a 2600 router

lxaguila
Level 1
Level 1

I have a 2600 router, the show queue serial 0/1, showme this kind of traffic:

Packet 5, linktype: ip, length: 85, flags: 0x8

source: 62.239.56.32, destination: 96.33.177.203, id: 0x747E, ttl: 84, prot: 1

53

data: 0x69CB 0xEBFF 0xB701 0xA391 0x5FEC 0xB945 0x42F1

0x697B 0x6847 0xDFEC 0x206A 0xEB84 0x62B7 0x3310

Packet 6, linktype: ip, length: 9, flags: 0x10000088

source: 58.30.22.13, destination: 8.130.23.142, id: 0x834C, ttl: 127,

TOS: 0 prot: 6, source port 3709, destination port 1352

data: 0x0E7D 0x0548 0x0165 0x75CC 0x0172 0xA92E 0x5018

0x1E32 0x4F3B 0x0000 0x1DEE 0xF76A 0xCD1E 0x7C60

Packet 7, linktype: ip, length: 85, flags: 0x8

source: 76.64.0.127, destination: 6.216.234.158, id: 0x7608, ttl: 0, prot: 5

data: 0x67B1 0xFDD2 0x8FEE 0x1797 0xDE0F 0x62F0 0xDB76

0x5D38 0x6CD5 0x613E 0x6865 0xDD22 0x0B77 0x7CDD

Packet 8, linktype: ip, length: 85, flags: 0x8

source: 103.123.239.149, destination: 242.228.199.30, id: 0x77E6, ttl: 5, prot

: 73

This source address there are not in my network.

Somebody Knows what kind of attack I have.

2 Replies 2

a-vazquez
Level 6
Level 6

It looks like it may be a smurf attack. Here’s some help http://www.cisco.com/warp/public/707/22.html

If it's a smurf attack, is not one of the well-know attack.

Any idea??

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: