RE: UDP flooding

From: wing_lam@jossynergy.com
Date: Mon Jun 23 2003 - 13:03:09 GMT-3


Hi Johnathan,

Thx, I think the broadcast MAC will be with all 1's but I have no idea on
the OUI type with all ones, even after I searched the following link:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1824/products_command_reference_chapter09186a008008065d.html

So I guess the example is wrong, and if it's my fault please let me know.

But I still don't know how the "UDP flooding" works. In my perception, it
means "UDP broadcast packets passing hope by hope with the destination
broadcast address changes accordingly in each hope, and the spanning tree
will deal with the forwarding and blocking; while other normal user
traffics will still through unicast routing"

Am I right, anybody please correct me; I am still not very clear in how the
spanning-tree part of the "UDP flooding" functions.

Thx a lot,
BBD (Big Black Dog)

                                                                                                                                       
                      "Jonathan V Hays"
                      <jhays@jtan.com> To: <wing_lam@jossynergy.com>
                      Sent by: cc: <ccielab@groupstudy.com>
                      nobody@groupstudy Subject: RE: UDP flooding
                      .com
                                                                                                                                       
                                                                                                                                       
                      06/23/2003 11:11
                      PM
                      Please respond to
                      "Jonathan V Hays"
                                                                                                                                       
                                                                                                                                       

> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> Behalf Of wing_lam@jossynergy.com
> Sent: Monday, June 23, 2003 10:22 AM
> To: Connie Nie
> Cc: ccielab@groupstudy.com
> Subject: RE: UDP flooding
>
>
> Also, what is the use of access-list 201 deny 0xffff 0x0000
> in example?

You are denying MAC addresses with OUI of all ones.

HINT: So what type of MAC address would begin with all ones?



This archive was generated by hypermail 2.1.4 : Fri Jul 04 2003 - 11:11:07 GMT-3