[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Weird packet

Has anyone any idea why a machine get such a packet?

Packet log: input *ACTION* *iface* PROTO=6 207.46.197.102:65535 *my_machine_ip*:65535 L=756 S=0x00 I=33890 F=0x005D T=51 (#20)

Here comes the funny part:

nslookup -query=PTR 207.46.197.102

102.197.46.207.in-addr.arpa	name = microsoft.com.
102.197.46.207.in-addr.arpa	name = microsoft.net.
102.197.46.207.in-addr.arpa	name = www.domestic.microsoft.com.
102.197.46.207.in-addr.arpa	name = www.us.microsoft.com.

whois 207.46.197.102

Microsoft (NETBLK-MICROSOFT-GLOBAL-NET)
   One Redmond Way
   Redmond, WA 98052
   US

What the h*ll is that? I'm getting _tons_ of it!

If anyone has a Microsoft Windows machine running, I'de be curious to
know how it reacts to such a packet...

-- 
Lionel

-- 
To UNSUBSCRIBE, email to people-request@xxxxxxxxxx with a subject of
"unsubscribe". Trouble? Send an email with subject "help" to
people-request@xxxxxxxxxx