From: bravo (bravojun@hanmail.net)
Date: Mon Dec 30 2002 - 04:50:34 GMT-3
Hi,
I have some trouble with our ISP connection router.
I deployed "netflow switching" to my ISP connection router.
When I typed down "show ip cache flow" ,I found something strangerous and
dangerous.
C_7507#sh ip cache flow
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts
Gi0/0/0 127.0.0.106 AT4/1/0.1 108.122.0.0 00 0000 0000 1
Gi0/0/0 127.0.0.103 AT6/1/0.1 108.122.0.0 00 0000 0000 1
Gi0/0/0 127.0.0.102 AT6/1/0.1 108.122.0.0 00 0000 0000 6
Gi0/0/0 127.0.0.99 AT4/1/0.1 108.122.0.0 00 0000 0000 11
Gi0/0/0 127.0.0.94 AT4/1/0.1 108.122.0.0 00 0000 0000 1
Gi0/0/0 127.0.0.92 AT6/1/0.1 108.122.0.0 00 0000 0000 1
Gi0/0/0 127.0.0.89 AT4/1/0.1 108.122.0.0 00 0000 0000 7
Gi0/0/0 127.0.0.86 AT6/0/0.1 108.122.0.0 00 0000 0000 5
Gi0/0/0 127.0.0.85 AT6/1/0.1 108.122.0.0 00 0000 0000 5
Gi0/0/0 127.0.0.83 AT6/1/0.1 108.122.0.0 00 0000 0000 10
Gi0/0/0 127.0.0.82 AT6/1/0.1 108.122.0.0 00 0000 0000 5
But we do not use any of this network address and what is 00 protocol and
0000 0000 port???
[TABLE NOT SHOWN]
[TABLE NOT SHOWN][TABLE NOT SHOWN][IMAGE]
.
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:54 GMT-3