[Dshield] Weird scanning, weird ports, weird TCP flags..
brian at dessent.net
Thu Oct 23 20:17:39 GMT 2003
Nick Harley wrote:
> This is a bit of a newbie question but I don't understand your range
> notation: "private address space and ranges like: 0/8, 1/8, 126/8, etc."
> Can anyone tell me how this works? I've seen it in other places as well
> but no one's really been able to give a good explanation.
(I'm sure the list will be flooded with responses to this...)
"foo/n" means that the first n bits of foo are the network address and
the rest are the subnet. So 22.214.171.124/24 indicates a subnet of 126.96.36.199 -
188.8.131.52. See also <http://www2.nolug.org:81/tcp-ip-class/x247.html>
More information about the list