How is that? Destination 0.0.0.0

kdd · ‎03-13-2014

Hi,

how is that possible that a lot of syn flood packets have as destination 0.0.0.0

There are certain IP-Adresses protect against syn-flood and of course they will be dropped like thos one.

But destination address with 0.0.0.0 looks for me like ????.

Is there an explanation or hint for out there?

Thx

Kind regards

Klaus

panos · ‎03-13-2014

This will help you

Note: For flood attacks (SYN, UDP, ICMP), the Threat log will show 0.0.0.0 for attacker and victim as there is typically

more than one IP address that is the source and destination of the attack.

panos · ‎03-13-2014

This will help you

Note: For flood attacks (SYN, UDP, ICMP), the Threat log will show 0.0.0.0 for attacker and victim as there is typically

more than one IP address that is the source and destination of the attack.

kdd · ‎03-13-2014

faster than syn flood. Thx