OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [snort] Anybody got a clue
From: CyberPsychotic (fygraveepr0.org)
Date: Mon Mar 06 2000 - 19:32:49 CST

~ :the uoregon.edu network (shown as 'a'). So then you have traffic that is
~ : a --> b
~ :where your network is neither a nor b. That pretty much leaves spoofing
~ :from the local segment... If the packet came from outside his net, then
~ :how on earth did it get routed there?
~ :

 Source-routed frames is one possibility. Spoofed packets from within the
network is the other. if some sort of ip nat'ing is involved, it's the
third possibility I can see..