on another IP issue, I have noticed some where the IP takes the form 012.034.056.123 these are almost certainly spoofed as well since I have never seen a valid IP that started with leading 0's
afaik it's not that they're specifically invalid, but as you say it flags up as an oddity. Do they also have numbers outside the 2^8 range?<
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.”
Also, concerning the NULL data. I have been seeing the ip addresses recorded with an additional comma after the first ip address without any data following the comma like below (000.000.000.000 is being used as an example of an ip address and not an actual nor a NULL ip address ):
I've updated the code in the original topic to handle IP addresses that may include a port number in them.
Etymon, my fix will take care of that trailing comma.
<
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.”
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.”
Search is your friend “I was having a mildly paranoid day, mostly due to the fact that the mad priest lady from over the river had taken to nailing weasels to my front door again.”
Forum Locked
Topic Locked
Posted - 14 January 2007 : 11:58:13
):
<