⬢ DragonFlyBSD Kernel Audit
DF-0650 / run.log
← back to finding ↓ download raw 
=== ipfw setup ===
=== PoC summary ===
[r0 L7] EMITTED rc=4 (1 OOB byte(s) in ip_dst)
[r0 L6] EMITTED rc=4 (2 OOB byte(s) in ip_dst)
[r0 L5] EMITTED rc=4 (3 OOB byte(s) in ip_dst)
[r0 L4] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[r0 L3] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[r0 L2] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[r1 L7] EMITTED rc=4 (1 OOB byte(s) in ip_dst)
[r1 L6] EMITTED rc=4 (2 OOB byte(s) in ip_dst)
[r1 L5] EMITTED rc=4 (3 OOB byte(s) in ip_dst)
[r1 L4] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[r1 L3] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[r1 L2] EMITTED rc=4 (4 OOB byte(s) in ip_dst)
[*] summary: 96 emitted, 0 failed
=== ipfw counts ===
00100  40 1904 count log ip from 10.0.2.0/24 to 10.0.2.0/24
00200   0    0 count log ip from 10.0.2.0/24 to 127.0.0.0/8
00300  48 1152 count log ip from 10.0.2.0/24 to 255.255.255.255
00400 120 3824 count log ip from 10.0.2.0/24 to any
01000 120 3824 allow ip from any to any
65535   4  160 deny ip from any to any
=== tcpdump on vtnet0 (first 30 lines, sorted) ===
   1 01:49:23.923971 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.923672 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.923486 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.923290 IP 10.0.2.15 > 10.255.255.255:  ip-proto-255 4
   1 01:49:23.923098 IP 10.0.2.15 > 10.0.255.255:  ip-proto-255 4
   1 01:49:23.922875 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.922780 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.902176 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.902020 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.901859 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.900939 IP 10.0.2.15 > 10.255.255.255:  ip-proto-255 4
   1 01:49:23.900783 IP 10.0.2.15 > 10.0.255.255:  ip-proto-255 4
   1 01:49:23.900581 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.900528 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.880044 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.879965 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.879871 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.879716 IP 10.0.2.15 > 10.255.255.255:  ip-proto-255 4
   1 01:49:23.879552 IP 10.0.2.15 > 10.0.255.255:  ip-proto-255 4
   1 01:49:23.879346 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.879197 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.858806 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.858657 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.858516 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.858367 IP 10.0.2.15 > 10.255.255.255:  ip-proto-255 4
   1 01:49:23.858217 IP 10.0.2.15 > 10.0.255.255:  ip-proto-255 4
   1 01:49:23.858026 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.857975 IP 10.0.2.15 > 10.0.2.255:  ip-proto-255 4
   1 01:49:23.837436 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4
   1 01:49:23.837281 IP 10.0.2.15 > 255.255.255.255:  ip-proto-255 4