Land attack
advICE :Intrusions : 2000001

Summary

An Attacker is trying to slow down your machine.

Details

Attacker has sent a frame to the system with the same source and destination IP address being that of the system. This requires the IP address to be spoofed.

Because this is theoretically impossible, the Windows stack doesn't handle the condition correctly. While the system doesn't crash, each packet received causes a temporary slow-down. This is caused by the system trying to resolve an infinite series of connections to itself.

Defense

Fixes are available for most operating systems - consult your operating system vendor for more information, or look at the CERT and Microsoft Advisories on this subject.

Spoofing

The IP address is spoofed, guaranteed.

 
Version appeared: