dos attacking myself

  • Thread starter Thread starter bgd
  • Start date Start date
B

bgd

Hi
I have a network setup problem i cant figure out
typical pc to linksys router, to DSL modem.
Upon packet monitoring, I am sending packets to the router via tcp,
hundreds in seconds, and it is annoying, net hindering.
File sharing is off, server service off, static ip (no dhcp broadcast) dsl
modem to router to my pc.
and it shows my pc is definately the cuplrit. What is it, how do i stop it.
I even went through services and shut down unnecessary procs.
 
To add to info, I found a better packet monitor revealing it is a system
process doing this
ports 1042 (my pc) to 5431 (router)
os is xp like in the newsgroup title.
 
Yet more info from analyzing packet... Something linux is cuplrit running as
system proc on my XP Home
I put "*" symbol in place of uuid,Below is packet info in ASCII:

<?xml version="1.0"?>
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><m:GetStatusInfoResponse
xmlns:m="urn:schemas-upnp-org:service:WANIPConnection:1"><NewConnectionStatus>Connected</NewConnectionStatus><NewLastConnectionError></NewLastConnectionError><NewUptime>42949</NewUptime></m:GetStatusInfoResponse></s:Body></s:Envelope>
POST /uuid:********************/WANCommonInterfaceConfig:1 HTTP/1.1
Content-Type: text/xml; charset="utf-8"
SOAPAction:
"urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"
User-Agent: Mozilla/4.0 (compatible; UPnP/1.0; Windows 9x)
Host: 192.168.2.1:5431
Content-Length: 309
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
 
Now that I've replied 3 times to myself... May as well have fixed it
myself.
Unplugged router for a min, then went again. It stopped the problem.
Thanks for the help! this place is great!
 
bgd said:
Now that I've replied 3 times to myself... May as well have fixed it
myself.
Unplugged router for a min, then went again. It stopped the problem.
Thanks for the help! this place is great!
Click to expand...

everybody was just thinking :> glad you got it sorted out ..stuck in an
ack/nack loop? :>
 
Possibly. I may have given it the trouble myself by replacing lan card and
noticed i got same ip on first boot with it (internet always gives me a new
ip on different lan card), no doubt confused it without resetting (restack).
Packets were random in size too, like a dos attack would... LOL.
 
It is doing it again. This time nothing is stopping it. I am static setup to
avoid these retarded broadcasts, now Im getting more than ever. Also. How do
I make "internet connection" Icon go away in network connections folder. I
do not need that there either, and believe that is source of all these
packets (it has got a statistics info page showing me my
pc->router->internet) I've tried everything but going back to dhcp
broadcasting and full dynamic ip setup.
 
Fixed yet again! Upnp and my new netgear pci fa311, to lynksys wrt54G router
is bad news. Disabled Upnp on linksys router, now all is good.
and no more "internet connection" icon with all those informative packet
blasting retrievals to tell me what I don't need to know.
 
Back
Top