* IP port over 65535 ?!
@ 2006-04-27 0:18 Jesse Gordon
2006-05-31 7:25 ` Nick Drage
0 siblings, 1 reply; 2+ messages in thread
From: Jesse Gordon @ 2006-04-27 0:18 UTC (permalink / raw)
To: netfilter
I sometimes see a port number like this in Tcpdump:
10.0.0.76.2049 > 64.x.x.5.796094310: reply ERR 394
64.7.197.5.791752241 > 10.0.0.76.2049: 1460 proc-170106..
Ever seen anything like this?
I'm a small natting ISP -- all of the above looks good except that port
number of 791752241..
Thanks!
-Jesse Gordon
Nikola Engineering Inc.
224 W. Washington St.
Suite 104
Sequim, WA 98382-3371
Tel (360)582-1051
Fax (360)582-1104
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: IP port over 65535 ?!
2006-04-27 0:18 IP port over 65535 ?! Jesse Gordon
@ 2006-05-31 7:25 ` Nick Drage
0 siblings, 0 replies; 2+ messages in thread
From: Nick Drage @ 2006-05-31 7:25 UTC (permalink / raw)
To: netfilter
On Wed, Apr 26, 2006 at 05:18:06PM -0700, Jesse Gordon wrote:
> I sometimes see a port number like this in Tcpdump:
>
> 10.0.0.76.2049 > 64.x.x.5.796094310: reply ERR 394
>
> 64.7.197.5.791752241 > 10.0.0.76.2049: 1460 proc-170106..
>
> Ever seen anything like this?
>
> I'm a small natting ISP -- all of the above looks good except that port
> number of 791752241..
That looks like some kind of issue with tcpdump or the underlying
library. Have you looked at the same traffic with tethereal/ethereal?
--
How can I miss you if you won't go away?
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-05-31 7:25 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-04-27 0:18 IP port over 65535 ?! Jesse Gordon
2006-05-31 7:25 ` Nick Drage
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox