Teardrop attack

My router (DI-614+) log shows a teardrop attack detect, packet dropped.

I understand that the firewall feature stopped the attack, but what are the
full implications of this?

Bill

On Thu, 18 Sep 2003 19:13:41 -0700, "scram" <(E-Mail Removed)> wrote:

>My router (DI-614+) log shows a teardrop attack detect, packet dropped.
>
>I understand that the firewall feature stopped the attack, but what are the
>full implications of this?

Jeez, you mean there are still script kiddies out there using Teardrop? That
attack is like 5 years old! Surely everyone is patched for it (or has upgraded
past Windows 95) by now...!

Teardrop, IIRC, was like Winnuke and similar attacks in that it would send a
malformed network packet to a Windows machine and Windows would bluescreen or
crash. Even if your firewall hadn't filtered it, my guess is it probably
wouldn't have affected you.

--
Life is short - drive FAST!