Subject: bogus icmpv4 redirect from 130.128.22.233

From: [email-masked]
Date: Thu, 11 Nov 1999 04:30:22 +0900

(sorry if you are not in Washington DC)
	I'm seeing bogus icmpv4 sredirect sent from 130.128.22.233.  who is it?

itojun

36 bytes from 130.128.22.233: Redirect Host New router addr: 130.128.20.1 for icmp_seq=202

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 15:24:34 -0500

> I'm seeing bogus icmpv4 sredirect sent from 130.128.22.233.

yup.  i have to delete the route every few minutes.

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 15:24:34 -0500

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 15:47:22 -0500

> 36 bytes from 130.128.22.233: Redirect Host New router addr: 130.128.20.1 for icmp_seq=202

not seeing it now.  perhaps because i am now over in the east end of the
building as opposed to west where i saw it before?

randy

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 15:47:22 -0500

randy

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 17:17:40 -0500

roam.psg.com:/usr/home/randy> ping 130.128.20.1
PING 130.128.20.1 (130.128.20.1): 56 data bytes
64 bytes from 130.128.20.1: icmp_seq=0 ttl=255 time=53.508 ms
64 bytes from 130.128.20.1: icmp_seq=1 ttl=255 time=14.806 ms
64 bytes from 130.128.20.1: icmp_seq=2 ttl=255 time=19.954 ms
^C
--- 130.128.20.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 14.806/29.423/53.508/17.160 ms
roam.psg.com:/usr/home/randy> traceroute -n rip
traceroute to rip.psg.com (147.28.0.39), 30 hops max, 40 byte packets
 1  130.128.20.1  20.514 ms !N  10.762 ms !N  11.938 ms !N

---

From: Randy Bush <[email-masked]>
Date: Wed, 10 Nov 1999 17:17:40 -0500