North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New Denial of Service Attack on Panix\

  • From: Tim Bass
  • Date: Thu Oct 03 03:08:34 1996 
Two things:

(1)

> 
> When there's nothing listening on those ports all the sockets, descriptors,
> queues, pcbs, etc... go away.

How about when a socket is actively listening?  

(2)

Why when I do a traceroute to 0.0.0.4 or some similar bogus route,
the router does not send an ICMP destination unreachable error
back to me?

My plan tonight was to hack the tcp_err() routine for sockets in
the SYN_RECV state that is looking for an ACK and got an ICMP
UNREACHABLE instead.... however, the ICMP UNREACHABLE CLUES
never come.  As my 5 year old nephew says.... " I NEED THAT !"


Shouldn't these error messages be returned 'as a rule' ??

Thanks,

Tim








- - - - - - - - - - - - - - - - -