Smurf and TCP FIN Scan

  woodchip 23:24 13 Mar 06

So I now they are port scanners etc but I do not know if they are reading anything

Smurf ATM1



I do have Router Firewall, I found these in the Log

  Smegs 00:25 14 Mar 06

"A smurf attacker sends PING requests to an Internet broadcast address. These are special addresses that broadcast all received messages to the hosts connected to the subnet. Each broadcast address can support up to 255 hosts, so a single PING request can be multiplied 255 times. The return address of the request itself is spoofed to be the address of the attacker's victim. All the hosts receiving the PING request reply to this victim's address instead of the real sender's address. A single attacker sending hundreds or thousands of these PING messages per second can fill the victim's line with ping replies, bring the entire Internet service to its knees." Got that from Here, click here

FIN scanning
In FIN scanning, due to a poor networking code in the kernel of many Operating Systems, if TCP FIN packet is sent to a port and the port replies with a TCP RST packet, then the port is closed. If there is no TCP RST packet returned, then the port is listening. Got this from here,click here

Hope this is what your asking Woodchip. Sorry if it is not.

  surfmonkey #:@} 02:59 14 Mar 06

i remember the last time tiscai had a smurf attact it crashed there network it wasnt to long ago

  woodchip 09:59 14 Mar 06

Yes they are similar things to what I found, But I looks like they was aimed at my XP laptop on a Router Firewall with ping not to respond. So in stealth mode, but I have had more smurf's than TCP Fin

  woodchip 10:23 14 Mar 06

Also had Smurf and Fin outbound, could this be anything to do with Router and Wireless Laptop connection.

  Smegs 11:13 14 Mar 06

Just had a look at our Firewall and router(not wireless).

I haven't got any smurf's or Fin's.

  woodchip 15:39 14 Mar 06

This is one in my log

2006.03.12 05:08:27 **Smurf**, 23038->>, 1026 (from ATM1 Inbound)

and this the other type

2006.03.08 10:45:21 **TCP FIN Scan**, 2542->>, 80 (from ATM1 Outbound)

also this type

2006.03.05 12:22:01 **Smurf**>>, Type:3, Code:3 (from ATM1 Outbound)

  woodchip 19:05 14 Mar 06

Not but nobody seems to know

This thread is now locked and can not be replied to.

Huawei P10 review

1995-2015: How technology has changed the world in 20 years

An overview: What leading creative agencies are doing to improve diversity

New iPad, iPhone SE & Red iPhone 7 on sale now