Post B0sjowDX0Wv903uo4G by rmd1023@infosec.exchange
 (DIR) More posts by rmd1023@infosec.exchange
 (DIR) Post #B0sjowDX0Wv903uo4G by rmd1023@infosec.exchange
       2025-12-03T19:56:49Z
       
       0 likes, 1 repeats
       
       Okay, running into some WTF-ery in the realm of network layer operations and security.  So, I have this network.  It has some border routers, and inside the border routers are some core routers.  I saw a message on a core router (so, one full device behind the outside edge of my network) that said this:> ospf[1027]: %ROUTING-OSPF-4-BADLENGTH : Invalid length 37614 in OSPF packet from x.x.x.x (ID y.y.y.y), HundredGigE0/0/0/0Neither x.x.x.x nor y.y.y.y are IPs in my network or in my interior routing protocol at all.  They are both several AS's away. OSPF is based on multicast, and I can't easily see a way for it to get several hops inside my network like that.  I don't think there's a way to send a unicast packet that will get read as an ospf packet by the destination host.  What the heck am I looking at, here?  I feel like I am missing something obvious but if so, I don't know what. (which is kind of implicit in "missing," but, you know).
       
 (DIR) Post #B0sjqcYN5XNyaoSuzQ by feld@friedcheese.us
       2025-12-03T20:01:07.788930Z
       
       0 likes, 0 repeats
       
       @rmd1023 something is being VERY naughty