HEDG Posted December 4, 2010 Posted December 4, 2010 Доброго времени суток всем Наговцам! На одном из интерфейсов приходит вот такой трафик 21:42:34.909812 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 21:42:36.917328 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 21:42:38.920532 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 21:42:40.923270 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 21:42:42.926246 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 21:42:44.929815 dc:7b:94:08:bb:16 (oui Unknown) > 01:00:0c:cc:cc:cd (oui Unknown), 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid Unknown (0x010b): Unnumbered, ui, Flags [Command], length 50 Встал вопрос, можно ли во FreeBSD запретить весь трафик по протоколу SNAP ? Можно ли его заблокировать на Cisco 29xx ? Где может использоваться этот протокол в современных реалиях? P.S. заранее спасибо за помощь. Вставить ник Quote
s.lobanov Posted December 4, 2010 Posted December 4, 2010 Сделайте tcpdump с ключами -v -vv , будет видно что это такое в самом деле. Вставить ник Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.