I was able to find the Teardrop Attack. However, there is another one but I couldn't explain it. It keeps getting the warning: Source MAC must not be a group address. Is this some sort of ARP spoofing to steal data?
Edit 1: Could there be a chance that a botnet auto-generate MAC address for packets but didn't work as expected?