Flushot attack
advICE :Intrusions : 2000022

Summary

This indicates an attempt to hang your system.

Details

The Flushot attack is designed to crash your system by sending invalid IP fragments at it. This attack is also sometimes referred to as a "1234" attack.

Defense

Most firewalls will automatically filter out these packets.

Spoofing

Most instances of this attack are from spoofed IP addresses.

parametric information offset The offset from the start of the original packet this fragment appeared in. len The length of this fragment. proto The protocol number (1=ICMP,6=TCP,17=UDP).

 
Version appeared: 2.5