Re: Mysterious packet

2012-11-09 Thread Tom Furie
On Fri, Nov 09, 2012 at 06:50:30PM -0500, Neal Murphy wrote: > Were I a paranoid type, I might think that someone was inventing a new > attack, > where they try to induce two large sites to DoS each other, or try to clog a > trans-oceanic cable. Reminds of a line from a film, "Strange Days", I

Re: Mysterious packet

2012-11-09 Thread Neal Murphy
On Friday, November 09, 2012 06:30:37 PM Tom Furie wrote: > Not sure it helps any, but the 74.125.0.0/16 block belongs to Google and > the 25.0.0.0/8 block belongs to the UK's MoD. Looks like some sort of > attack attempt to me. Were I a paranoid type, I might think that someone was inventing a ne

Re: Mysterious packet

2012-11-09 Thread Tom Furie
On Fri, Nov 09, 2012 at 07:46:11PM +, Hendrik Boom wrote: > On Thu, 08 Nov 2012 12:15:55 -0500, Neal Murphy wrote: > > > On Thursday, November 08, 2012 11:58:33 AM Darac Marjal wrote: > >> On Thu, Nov 08, 2012 at 03:26:23PM +, Hendrik Boom wrote: > >> > I've started getting messages like t

Re: Mysterious packet

2012-11-09 Thread Hendrik Boom
On Thu, 08 Nov 2012 12:15:55 -0500, Neal Murphy wrote: > On Thursday, November 08, 2012 11:58:33 AM Darac Marjal wrote: >> On Thu, Nov 08, 2012 at 03:26:23PM +, Hendrik Boom wrote: >> > I've started getting messages like the following: >> > >> > [12332.047451] IN=ppp0 OUT=ppp0 SRC=74.125.133.

Re: Mysterious packet

2012-11-08 Thread Neal Murphy
On Thursday, November 08, 2012 11:58:33 AM Darac Marjal wrote: > On Thu, Nov 08, 2012 at 03:26:23PM +, Hendrik Boom wrote: > > I've started getting messages like the following: > > > > [12332.047451] IN=ppp0 OUT=ppp0 SRC=74.125.133.188 DST=25.46.128.71 > > LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=4

Re: Mysterious packet

2012-11-08 Thread Darac Marjal
On Thu, Nov 08, 2012 at 03:26:23PM +, Hendrik Boom wrote: > I've started getting messages like the following: > > [12332.047451] IN=ppp0 OUT=ppp0 SRC=74.125.133.188 DST=25.46.128.71 LEN=40 > TOS=0x00 PREC=0x00 TTL=50 ID=46353 PROTO=TCP SPT=5228 DPT=44380 WINDOW=0 > RES=0x00 RST URGP=0 > [11

Mysterious packet

2012-11-08 Thread Hendrik Boom
I've started getting messages like the following: [12332.047451] IN=ppp0 OUT=ppp0 SRC=74.125.133.188 DST=25.46.128.71 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=46353 PROTO=TCP SPT=5228 DPT=44380 WINDOW=0 RES=0x00 RST URGP=0 [79.489288] IN=ppp0 OUT=ppp0 SRC=74.125.133.188 DST=25.45.89.15 LEN=40 T