What sort of attack would this be?

[news-465rd3e6@spam-box.connectfree.co.uk]

A little off topic. Is teems someone is uailising the RAW sockets
facility.

My router is frequently logging the following:
25/04/2003 23:17:37.898 - 81.97.98.114 : 1026 >>> 81.97.98.144 : 137

In a nut shell, someone on the Internet is spoofing the source
address, but that address is the same as the destination.

As it's hitting a router that's not forwarding any ports, I'm not
conserned, but if Windows XP was to accept such a packet, what would
happen? Would the OS's IP protocol stack get locked in an endless
loop?

This is very recent. As in this type of probe started yesterday.

Comments . . .

[Roger Abell {MVP}]

did you make a typo, or just misread ??
114 and 144 are different

--=20
Roger=20

> wrote in message =
...
> A little off topic. Is teems someone is uailising the RAW sockets
> facility.
>=20
> My router is frequently logging the following:
> 25/04/2003 23:17:37.898 - 81.97.98.114 : 1026 >>> 81.97.98.144 : =
137
>=20
> In a nut shell, someone on the Internet is spoofing the source
> address, but that address is the same as the destination.
>=20
> As it's hitting a router that's not forwarding any ports, I'm not
> conserned, but if Windows XP was to accept such a packet, what would
> happen? Would the OS's IP protocol stack get locked in an endless
> loop?
>=20
> This is very recent. As in this type of probe started yesterday.
>=20
> Comments . . .