matthew zeier wrote:
I keep seeing stuff with a udp src or dst port of 0. Anyone else see that in the wild?
If you're getting that from netflow, it's probably IP fragments. _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/