The office is in the 2nd floor of a building where there are many other small companies located, like ours. Notice that only me and my boss are working together at the office (max 4 devices connected at a time. Maybe a botnet/spam/DDOS attack, I don't know. So, I ran Wireshark again today (v.3.2.3) during part of my work schedule (about 5h) and noticed there's a repetition of behaviour (packets transmitted/types) from certain devices on my local network(s)(router, laptop, other devices) from previous scans I did that seems to indicate that something is off. Receive notifications of new posts by email.I hope someone can help me here with a possible issue on my private networks (work and home):
OCSP v6/v4 (request-response and stapling).NTP v6/v4 (basic client-server, symmetric, control, authentication w/ md5 and sha-1 and nak, NTS with TLS 1.3).NetFlow (v9) v6 [Wireshark display filter:.IKEv1 v6/v4 (aggressive mode, main mode) [Wireshark display filter:.DNS v4/v6 (tons of RRs, UDP, TCP, fragmentation, DNSSEC validation, SERVFAIL, NXDOMAIN, ENDS(0) client subnet, EDNS(0) cookie, mDNS, dynamic update, zone change notification, IXFR, AXFR, TSIG).
DHCPv6 ( stateful, stateless, prefix delegation).Referenced by the classical transport protocol port number. OSPFv3 for IPv6 (plain & authentication via IPsec authentication header AH).ICMPv4 (ping, timestamp, destination unreachable, time-to-live exceeded).ICMPv6 (RS, RA w/ RDNSS and DNSSL, NS, NA, DAD, MLD with hop-by-hop extension header (number 0), ping, destination unreachables, packet too big, time exceeded).ESP v6/v4 (IPv6 extension header number 50).AH v6 (IPv6 extension header number 51, used by OSPFv3).Referenced by the IP Protocol Number, which is the “Next Header” field in IPv6 respectively the “Protocol” field in IP.
0 kommentar(er)
