| |
VE4KLM > JNOS 10.12.20 01:44z 47 Lines 1638 Bytes #999 (0) @ WW
BID : A08W8_VE4KLM
Read: GUEST
Subj: Re: new release DOS ATTACK
Path: SR1BSZ<SR4BBX<DB0RES<DB0ERF<IZ3LSV<IR1UAW<I0OJJ<VE4KLM
Sent: 201210/0508z @:VE4KLM.#WPG.MB.CAN.NOAM [Winnipeg] $:A08W8_VE4KLM
I'm having a hard time trying to see how this is new release related.
I am investigating. This is not intentional, I'm trying to figure out
what looks
like the most bizzare thing. For example, when I normally kick GB7CIP to
forward with him, I get these headers (just the first 3 are important) :
Wed Dec 9 21:37:43 2020 - paul recv:
AX25: GB7CIP-5->VE4KLM-3 SABM(P)
0000 ac 8a 68 96 98 9a e6 8e 84 6e 86 92 a0 6b 3f ,.h...f..n.. k?
Wed Dec 9 21:37:43 2020 - paul sent:
AX25: VE4KLM-3->GB7CIP-5 UA(F)
0000 8e 84 6e 86 92 a0 6a ac 8a 68 96 98 9a e7 73 ..n.. j,.h...gs
Wed Dec 9 21:37:43 2020 - paul recv:
AX25: GB7CIP-5->VE4KLM-3 I NR=0 NS=0 pid=NET/ROM
NET/ROM: GB7CIP->VE4KLM-3 ttl 31
BUT for the past while, the NET/ROM portion has NOT been presented back
to me, it's like the NETROM listener on Paul's side is not enabled or dead.
So what I've seen anytime these packet storms happen is just this :
Wed Dec 9 21:37:43 2020 - paul recv:
AX25: GB7CIP-5->VE4KLM-3 SABM(P)
0000 ac 8a 68 96 98 9a e6 8e 84 6e 86 92 a0 6b 3f ,.h...f..n.. k?
Wed Dec 9 21:37:43 2020 - paul sent:
AX25: VE4KLM-3->GB7CIP-5 UA(F)
0000 8e 84 6e 86 92 a0 6a ac 8a 68 96 98 9a e7 73 ..n.. j,.h...gs
Over and over and over, NO NETROM though from gb7cip side. My side of
course is aggresively sending them. A race condition of sorts or perhaps a
bug from long ago ? I don't know right now. But that is what my traces are
showing.
This could be a JNOS situation triggered by not getting the netrom
expected ?
I don't know right now, anyways, this is this latest information I can
give you.
Maiko / VE4KLM
Read previous mail | Read next mail
| |