topic How is that? Destination 0.0.0.0 in General Topics

How is that? Destination 0.0.0.0

kdd — Thu, 13 Mar 2014 19:42:14 GMT

Hi,

how is that possible that a lot of syn flood packets have as destination 0.0.0.0

There are certain IP-Adresses protect against syn-flood and of course they will be dropped like thos one.

But destination address with 0.0.0.0 looks for me like ????.

Is there an explanation or hint for out there?

Thx

Kind regards

Klaus

Retired Member — Thu, 13 Mar 2014 19:51:33 GMT

This will help you

Note: For flood attacks (SYN, UDP, ICMP), the Threat log will show 0.0.0.0 for attacker and victim as there is typically

more than one IP address that is the source and destination of the attack.

kdd — Thu, 13 Mar 2014 19:58:20 GMT

faster than syn flood. Thx