packet too large? Png Of Death?

Drexx Laggui (drexxpacific.net.sg)
Wed, 03 Nov 1999 19:21:44 +0800

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Jason Axley: "Re: Custom Reports"
• Previous message: Manuel Rocha: "Custom Reports"
• Next in thread: Axel FALCK: "RE: packet too large? Png Of Death?"
• Reply: Axel FALCK: "RE: packet too large? Png Of Death?"
• Reply: Ben Nagy: "RE: packet too large? Png Of Death?"

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

Hello world,

Why is the packet too large??? Is it a variation of the Ping Of Death ???

I have a FireWall-1 controlling access to VLANs across Cabletron switches.
The RealSecure v3.0.2 constantly alerts with a Ping Of Death attack, while
the FireWall-1 reports that the packets are too large, with an IP Protocol
number of zero.

It maybe coincidental fact, but the internal networks are of IP address
a.b.y.z,
yet the source/destination of the attacks reported are of y.z.a.b .
The weird thing is that I think that the Cabletron maybe mangling the
packets
or something, therefore creating a lot of false positives on the RealSecure.

Any idea what is really happening? Thanks in advance,

Drexx Laggui.

• Next message: Jason Axley: "Re: Custom Reports"
• Previous message: Manuel Rocha: "Custom Reports"
• Next in thread: Axel FALCK: "RE: packet too large? Png Of Death?"
• Reply: Axel FALCK: "RE: packet too large? Png Of Death?"
• Reply: Ben Nagy: "RE: packet too large? Png Of Death?"

This archive was generated by hypermail 2.0b3 on Mon Nov 15 1999 - 12:07:32 CST