[THIN] Re: Port Scanning
- From: "Ryan Lambert" <rlambert@xxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Mon, 29 Mar 2004 16:32:14 -0500
Ya, I know.... ;-)
-----Original Message-----
From: Henry Sieff [mailto:hsieff@xxxxxxxxxxxx]=20
Sent: Monday, March 29, 2004 4:30 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Port Scanning
If its the same issue I am thinking of, its not actually a caveat, but
does
require tuning of the small memory buffers. FWIW, there are also chances
that portscanners can have an effect on cisco equipment; there was a
great
one where if you did the sU scan and inclused port 514, a 2600 running
12.0(2) would simply reload.
In almost all cases that I am familiar with, the issue arises not when
hosts
are scanned through a router/layer3 switch, but when the device itself
is
scanned. Usually, there are specific actions which can be taken to
mitigate.
Henry
> -----Original Message-----
> From: Timothy Mangan [mailto:tmangan@xxxxxxxxxxxx]
> Sent: Monday, March 29, 2004 3:09 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Port Scanning
>=20
>=20
> They really should fix that - it has been a problem for many=20
> years now.
> It's really a packet rate thing. You can pound it with any=20
> small packets to
> hose up the router. I've seen it done with both bisync and=20
> icmp traffic.
>=20
> tim
>=20
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx=20
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
> Of Ryan Lambert
> Sent: Monday, March 29, 2004 3:13 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Port Scanning
>=20
> Hi James,
>=20
> UDP scanning with nmap (-sU) has been known to crash Cisco IOS version
> 12.0T, 12.0S, etc.
>=20
> -----Original Message-----
> From: James A. Hayes [mailto:jhayes@xxxxxxxxxxxxxxxxxx]=3D20
> Sent: Monday, March 29, 2004 2:10 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Port Scanning
>=20
> Has anyone seen where port scanning caused major network issues? Our
> security officer runs port scans on our network when ever she wants to
> and
> it never fails that our network then chugs down to a complete halt and
> we
> have to reboot our core switch to correct the problem. Any ideas or
> suggestions?
> =3D20
>=20
> James A. Hayes
>=20
> Network Operations Manager & Assistant Vice-President
>=20
> The Peoples Bank & Trust Company
>=20
> =3D20
>=20
> (work) 662.680.1667
>=20
> (mobile) 662.401.0750
>=20
> (fax) 662.680.1502
>=20
> =3D20
>=20
> =3D20
>=20
>=20
>=20
> ********************************************************
> This weeks sponsor Emergent Online.
> Emergent OnLine is the leading server-based computing consulting
> integration firm in the nation. Emergent OnLine delivers expert=3D20
> consulting services you can depend on.
> http://www.go-eol.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or=3D20
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
> ********************************************************
> This weeks sponsor Emergent Online.
> Emergent OnLine is the leading server-based computing=20
> consulting integration
> firm in the nation. Emergent OnLine delivers expert=20
> consulting services you can depend on.
> http://www.go-eol.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or=20
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>=20
> ********************************************************
> This weeks sponsor Emergent Online.
> Emergent OnLine is the leading server-based computing=20
> consulting integration firm in the nation. Emergent OnLine=20
> delivers expert=20
> consulting services you can depend on.
> http://www.go-eol.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or=20
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>=20
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting
integration firm in the nation. Emergent OnLine delivers expert=20
consulting services you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert
consulting services you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
