Present Location: News >> Blog >> Attacked by ACKs

Blog

> Attacked by ACKs
Posted by prox, from Charlotte, on August 09, 2009 at 12:35 local (server) time

This is strange, whenever I reset my Cisco 7960G IP phone from the telnet interface, when the phone comes back up it sends a steady stream of TCP ACK packets to my workstation:

12:31:38.380373 IP 10.3.5.104.23 > 10.3.5.107.47447: Flags [.], ack 1, win 1400, length 0
12:31:38.380385 IP 10.3.5.107.47447 > 10.3.5.104.23: Flags [R], seq 1654266114, win 0, length 0
12:31:38.400391 IP 10.3.5.104.23 > 10.3.5.107.47447: Flags [.], ack 1, win 1400, length 0
12:31:38.400400 IP 10.3.5.107.47447 > 10.3.5.104.23: Flags [R], seq 1654266114, win 0, length 0
12:31:38.420410 IP 10.3.5.104.23 > 10.3.5.107.47447: Flags [.], ack 1, win 1400, length 0
12:31:38.420422 IP 10.3.5.107.47447 > 10.3.5.104.23: Flags [R], seq 1654266114, win 0, length 0
12:31:38.440379 IP 10.3.5.104.23 > 10.3.5.107.47447: Flags [.], ack 1, win 1400, length 0
12:31:38.440393 IP 10.3.5.107.47447 > 10.3.5.104.23: Flags [R], seq 1654266114, win 0, length 0
12:31:38.460447 IP 10.3.5.104.23 > 10.3.5.107.47447: Flags [.], ack 1, win 1400, length 0
12:31:38.460460 IP 10.3.5.107.47447 > 10.3.5.104.23: Flags [R], seq 1654266114, win 0, length 0

(10.3.5.104 is the phone, and 10.3.5.107 is my workstation)

Resetting the phone by the buttons (hold down *, 6, and settings) breaks it out of this loop.

Weird.

> Add Comment

New comments are currently disabled for this entry.