very much udp packets - TCP-IP

This is a discussion on very much udp packets - TCP-IP ; Hello, I have a local network that is connected to internet via a Zyxel ADSL router. It happens that the whole network gets blocked (when for example I can't ping two computers connected to the same switch). I have noticed ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: very much udp packets

  1. very much udp packets

    Hello,

    I have a local network that is connected to internet via a Zyxel ADSL
    router. It happens that the whole network gets blocked (when for
    example I can't ping two computers connected to the same switch).
    I have noticed that the traffic sometimes exceeds 100mbit, which
    subsequently blocks the switch.
    I have analyzed the traffic and I have seen that all packets are of
    the same type:

    No. Time Source Destination
    Protocol Info
    603029 50.819902 x.x.x.x y.y.y.y UDP Source
    port: 0 Destination port: 1026

    Frame 603029 (406 bytes on wire, 96 bytes captured)
    Ethernet II, Src: ZyxelCom_96:30:c4 (00:13:49:96:30:c4), Dst:
    OslinkSp_19:10:82 (00:15:d6:19:10:82)
    Internet Protocol, Src: x.x.x.x (x.x.x.x), Dst: y.y.y.y (y.y.y.y)
    User Datagram Protocol, Src Port: 0 (0), Dst Port: 1026 (1026)
    Data (54 bytes)

    0000 04 00 78 00 10 00 00 00 00 00 00 00 00 00 00
    00 ..x.............
    0010 00 00 00 00 00 00 00 00 f8 91 7b 5a 00 ff d0 11 ..........
    {Z....
    0020 a9 b2 00 c0 4f b6 e6 fc 00 00 00 00 00 00 00
    00 ....O...........
    0030 00 00 00 00 00 00 ......

    Can you tell me the possible reason? The source IP is outside my
    network but the destination IP is internal, so when the router is
    switched off and restarted the traffic returns to normal
    Best regards Oberdan Albertoni.


  2. Re: very much udp packets

    On Jul 2, 2:00 am, obe...@gmail.com wrote:
    > Hello,
    >
    > I have a local network that is connected to internet via a Zyxel ADSL
    > router. It happens that the whole network gets blocked (when for
    > example I can't ping two computers connected to the same switch).
    > I have noticed that the traffic sometimes exceeds 100mbit, which
    > subsequently blocks the switch.
    > I have analyzed the traffic and I have seen that all packets are of
    > the same type:
    >
    > No. Time Source Destination
    > Protocol Info
    > 603029 50.819902 x.x.x.x y.y.y.y UDP Source
    > port: 0 Destination port: 1026
    >
    > Frame 603029 (406 bytes on wire, 96 bytes captured)
    > Ethernet II, Src: ZyxelCom_96:30:c4 (00:13:49:96:30:c4), Dst:
    > OslinkSp_19:10:82 (00:15:d6:19:10:82)
    > Internet Protocol, Src: x.x.x.x (x.x.x.x), Dst: y.y.y.y (y.y.y.y)
    > User Datagram Protocol, Src Port: 0 (0), Dst Port: 1026 (1026)
    > Data (54 bytes)
    >
    > 0000 04 00 78 00 10 00 00 00 00 00 00 00 00 00 00
    > 00 ..x.............
    > 0010 00 00 00 00 00 00 00 00 f8 91 7b 5a 00 ff d0 11 ..........
    > {Z....
    > 0020 a9 b2 00 c0 4f b6 e6 fc 00 00 00 00 00 00 00
    > 00 ....O...........
    > 0030 00 00 00 00 00 00 ......
    >
    > Can you tell me the possible reason? The source IP is outside my
    > network but the destination IP is internal, so when the router is
    > switched off and restarted the traffic returns to normal
    > Best regards Oberdan Albertoni.


    Salut,

    http://www.secureworks.com/research/threats/popup-spam/

    -Le Chaud Lapin-


  3. Re: very much udp packets

    On 6 Lug, 05:19, Le Chaud Lapin wrote:
    > On Jul 2, 2:00 am, obe...@gmail.com wrote:
    >
    >
    >
    > > Hello,

    >
    > > I have a local network that is connected to internet via a Zyxel ADSL
    > > router. It happens that the whole network gets blocked (when for
    > > example I can't ping two computers connected to the same switch).
    > > I have noticed that the traffic sometimes exceeds 100mbit, which
    > > subsequently blocks the switch.
    > > I have analyzed the traffic and I have seen that all packets are of
    > > the same type:

    >
    > > No. Time Source Destination
    > > Protocol Info
    > > 603029 50.819902 x.x.x.x y.y.y.y UDP Source
    > > port: 0 Destination port: 1026

    >
    > > Frame 603029 (406 bytes on wire, 96 bytes captured)
    > > Ethernet II, Src: ZyxelCom_96:30:c4 (00:13:49:96:30:c4), Dst:
    > > OslinkSp_19:10:82 (00:15:d6:19:10:82)
    > > Internet Protocol, Src: x.x.x.x (x.x.x.x), Dst: y.y.y.y (y.y.y.y)
    > > User Datagram Protocol, Src Port: 0 (0), Dst Port: 1026 (1026)
    > > Data (54 bytes)

    >
    > > 0000 04 00 78 00 10 00 00 00 00 00 00 00 00 00 00
    > > 00 ..x.............
    > > 0010 00 00 00 00 00 00 00 00 f8 91 7b 5a 00 ff d0 11 ..........
    > > {Z....
    > > 0020 a9 b2 00 c0 4f b6 e6 fc 00 00 00 00 00 00 00
    > > 00 ....O...........
    > > 0030 00 00 00 00 00 00 ......

    >
    > > Can you tell me the possible reason? The source IP is outside my
    > > network but the destination IP is internal, so when the router is
    > > switched off and restarted the traffic returns to normal
    > > Best regards Oberdan Albertoni.

    >
    > Salut,
    >
    > http://www.secureworks.com/research/threats/popup-spam/
    >
    > -Le Chaud Lapin-


    Thank You for Your very muc.
    By Obe.


+ Reply to Thread