☰

RouterOS 发送格式错误的数据包

tag-icon • tag-icon wireshark mikrotik routeros
RouterOS 发送格式错误的数据包

我有一个 Routerboard 951G-2HnD，运行最新稳定版本：

RouterOS v6.50.5
Firmware v3.41

主板在 WPA2-PSK 模式下充当 WiFi AP。最近我注意到 AP 向客户端发送的流量异常多，而且毫无理由。Wireshark 捕获示例：

    Frame 11: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface 0
    Interface id: 0 (wlan0)
    Encapsulation type: Ethernet (1)
    Arrival Time: XX XX, 2017 18:24:01 XXX
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: XX.XX seconds
    [Time delta from previous captured frame: 0.073480897 seconds]
    [Time delta from previous displayed frame: 0.073480897 seconds]
    [Time since reference or first frame: 14.088600317 seconds]
    Frame Number: 11
    Frame Length: 14 bytes (112 bits)
    Capture Length: 14 bytes (112 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip]
Ethernet II, Src: Routerbo_XX:XX:cd (XX:XX:XX:XX:XX:cd), Dst: Tp-LinkT_XX:XX:d1 (XX:XX:XX:XX:XX:d1)
    Destination: Tp-LinkT_XX:XX:d1 (XX:XX:XX:XX:XX:d1)
        Address: Tp-LinkT_XX:XX:d1 (XX:XX:XX:XX:XX:d1)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Routerbo_55:43:cd (XX:XX:XX:XX:XX:cd)
        Address: Routerbo_55:43:cd (XX:XX:XX:XX:XX:cd)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
[Malformed Packet: IPv4]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]

包：

0000  98 de d0 15 2a d1 e4 8d 8c 55 43 cd 08 00         ....*....UC...

它可能是什么？

相关内容