Tcpdump: pacotes maliciosos?

Question

Os pacotes capturados com este comando são pacotes com o bit mal definido? Eu deveria me preocupar?

sudo tcpdump 'ip[6] & 128 != 0'

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
^C
0 packets captured
328 packets received by filter
321 packets dropped by kernel

o link onde encontrei este comando link obrigado

    

Answer 1

O "bit mal" é uma piada descrita no famoso RFC 3514 do April Fool. Não é implementado na realidade porque seria tolice fazê-lo. Você não tem nada para se preocupar.

De Wikipedia :

The evil bit is a fictional IPv4 packet header field proposed in RFC 3514, a humorous April Fools' Day RFC from 2003 authored by Steve Bellovin. The RFC recommended that the last remaining unused bit, the "Reserved Bit," in the IPv4 packet header be used to indicate whether a packet had been sent with malicious intent, thus making computer security engineering an easy problem – simply ignore any messages with the evil bit set and trust the rest.