Dead Men Walking

dMw Chit Chat => The Beer Bar => Seriously though ... => Topic started by: Doorman on May 17, 2006, 04:43:27 PM

Title: Router message
Post by: Doorman on May 17, 2006, 04:43:27 PM
This was sent to me by my router:
2006-05-17 03:09:30 - Ip Spoofing - Source:169.254.131.99,0,LAN - Destination:239.255.255.250,0,WAN
What does it mean and do I do anything?  :unsure:
Title: Router message
Post by: A Twig on May 17, 2006, 05:08:52 PM
May I refer the learned gentleman to THIS (http://www.securityfocus.com/infocus/1674) article which makes it quite clear. As your router detected it and therefore presumably stopped it you should be fine
Title: Router message
Post by: Doorman on May 17, 2006, 05:16:37 PM
QuoteOriginally posted by A Twig@May 17 2006, 05:08 PM
May I refer the learned gentleman to THIS (http://www.securityfocus.com/infocus/1674) article which makes it quite clear. As your router detected it and therefore presumably stopped it you should be fine
[post=127431]Quoted post[/post]
[/b]
Many thanks young sir. Although I must confess to not reading it, it looked the biz.  :dummy:  As long as you say it's all right, then my mind has been put at rest.  ;)
Title: Router message
Post by: Anonymous on May 17, 2006, 05:17:33 PM
QuoteOriginally posted by Doorman@May 17 2006, 03:43 PM
This was sent to me by my router:
2006-05-17 03:09:30 - Ip Spoofing - Source:169.254.131.99,0,LAN - Destination:239.255.255.250,0,WAN
What does it mean and do I do anything? :unsure:
[post=127423]Quoted post[/post]
[/b]
maybe your router is trying to wind you up :D
Title: Router message
Post by: Doorman on May 17, 2006, 07:05:42 PM
QuoteOriginally posted by BlueBall@May 17 2006, 05:17 PM
maybe your router is trying to wind you up :D
[post=127438]Quoted post[/post]
[/b]
Funny you should say that......
Title: Router message
Post by: Carr0t on May 17, 2006, 07:46:33 PM
QuoteOriginally posted by Doorman@May 17 2006, 03:43 PM
This was sent to me by my router:
2006-05-17 03:09:30 - Ip Spoofing - Source:169.254.131.99,0,LAN - Destination:239.255.255.250,0,WAN
What does it mean and do I do anything? :unsure:
[post=127423]Quoted post[/post]
[/b]

Well, the article posted by Twig tells you what IP spoofing means, but the way I interpret that message is that something on your LAN was acting up. 169.254.*.* is what Windows assigns itself as an IP address if it can find a network card set to DHCP it's IP (get it assigned by a DHCP server on the network, rather than statically set on the machine by you), but can't find a DHCP server to get said IP from. 239.255.255.250 is in the address range for multicast traffic. Looks to me like one of the machines on your LAN hadn't got it's IP set up correctly, and for some reason was trying to talk multicast (most commonly used for video streaming in my experience).

Dunno why it might have been doing that though.
Title: Router message
Post by: Benny on May 17, 2006, 07:58:26 PM
Read this, or don't worry about it.

http://rfc.net/rfc2365.html (http://rfc.net/rfc2365.html)

It's not video traffic, it's out of the reserved block. I'd stick with "don't worry about it".

Alternatively someone has broken into your house and is wearing your underwear whilst hiding in your cupboard. Whatever makes you feel more comfortable.
Title: Router message
Post by: Doorman on May 17, 2006, 10:44:18 PM
QuoteOriginally posted by Benny@May 17 2006, 07:58 PM
Read this, or don't worry about it.

http://rfc.net/rfc2365.html (http://rfc.net/rfc2365.html)

It's not video traffic, it's out of the reserved block. I'd stick with "don't worry about it".

Alternatively someone has broken into your house and is wearing your underwear whilst hiding in your cupboard. Whatever makes you feel more comfortable.
[post=127484]Quoted post[/post]
[/b]
What are you lot trying to do with my head?  :blink: Would it have had anything to do with the fact that I used 'Soulseek', a Kazaa type thingy, for the first time. I downloaded a bunch of music (yes, MUSIC!) and when I finished the internet had gawn. I rebooted and everything returned to normal. That when I got the email.

EDIT: Is this relevant? (http://faq.slsknet.org/index.php?action=artikel&cat=266085&id=576&artlang=en)
Title: Router message
Post by: Benny on May 18, 2006, 08:48:25 AM
QuoteOriginally posted by Doorman@May 17 2006, 10:44 PM
What are you lot trying to do with my head? :blink: Would it have had anything to do with the fact that I used 'Soulseek', a Kazaa type thingy, for the first time. I downloaded a bunch of music (yes, MUSIC!) and when I finished the internet had gawn. I rebooted and everything returned to normal. That when I got the email.

EDIT: Is this relevant? (http://faq.slsknet.org/index.php?action=artikel&cat=266085&id=576&artlang=en)
[post=127522]Quoted post[/post]
[/b]
Did you go installing patches from unsanctioned sources Ron? Eh? Eh?

Why are pirates called pirates?    Because the arrrrrrrrrr......

Nah, I still say don't worry about it.