Bugtraq mailing list archives

protocol 191?

From: ioh () WII COM (Il Oh)
Date: Wed, 17 Jun 1998 07:56:50 -0700

I've been looking over my cisco filter logs with a paranoid eye ever
since named crashed on both my name servers.  It's actually been very
educational.

I saw something the other day that I haven't been able to get any
information on.  It was a bunch of broadcast packets listed as protocol
191.  RFC 1700 lists protocols 101-254 as "unassigned".

There was a single broadcast packet for each of my class C networks.

Does anyone have any information about this?

Here are the entries from my log:

Jun 10 00:41:21 shaft.wii.com 58878: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:22 shaft.wii.com 58879: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:23 shaft.wii.com 58880: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:24 shaft.wii.com 58881: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:25 shaft.wii.com 58882: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:25 shaft.wii.com 58883: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:27 shaft.wii.com 58884: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:27 shaft.wii.com 58885: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:29 shaft.wii.com 58886: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:29 shaft.wii.com 58887: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:31 shaft.wii.com 58888: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:32 shaft.wii.com 58889: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:34 shaft.wii.com 58890: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:35 shaft.wii.com 58891: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:36 shaft.wii.com 58892: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:38 shaft.wii.com 58894: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:41 shaft.wii.com 58895: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:42 shaft.wii.com 58896: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:44 shaft.wii.com 58897: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:44 shaft.wii.com 58898: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:45 shaft.wii.com 58899: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:46 shaft.wii.com 58900: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:47 shaft.wii.com 58901: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:49 shaft.wii.com 58902: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:49 shaft.wii.com 58903: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:50 shaft.wii.com 58904: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:51 shaft.wii.com 58905: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Jun 10 00:41:53 shaft.wii.com 58906: %SEC-6-IPACCESSLOGNP: list 101 denied
191 <source> -> <dest>, 1 packet
Current thread:

protocol 191? Il Oh (Jun 17)
- Re: protocol 191? Ken Williams (Jun 18)
- IRIX mail(1)/rmail(1M)/sendmail(1M) Security Vulnerabilities SGI Security Coordinator (Jun 18)