North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: ICANN Targets DDoS Attacks

  • From: Jeff Shultz
  • Date: Tue Oct 29 16:08:05 2002


*********** REPLY SEPARATOR  ***********

On 10/29/2002 at 3:54 PM Jared Mauch wrote:

>On Tue, Oct 29, 2002 at 12:48:39PM -0800, Jeff Shultz wrote:
>> 
>> 
>> 
>> *********** REPLY SEPARATOR  ***********
>> 
>> On 10/29/2002 at 3:40 PM [email protected] wrote:
>> 
>> >On Tue, 29 Oct 2002 22:25:44 +0200, Petri Helenius <[email protected]>
>> said:
>> >
>> >> Why would you like to regulate my ability to transmit and receive
>> data
>> >> using ECHO and ECHO_REPLY packets? Why they are considered
>> >> harmful?
>> >
>> >Smurf.
>> >
>> 
>> Okay. What will this do to my user's ping and traceroute times, if
>> anything? I've got users who tend to panic if their latency hits
250ms
>> between here and the moon (slight exaggeration, but only slight). 
>> 
>> I just love it when I've got people blaming me because the 20th hop
on
>> a traceroute starts returning  * * * instead of times. 
>
>	that's icmp ttl expired messages.

I know that, and I try to explain it to my customers... but it doesn't
answer the first part of the question - what will throttling ICMP do to
ping and traceroute times? My gut reaction is that it will a. slow them
down and/or b. discard a lot of them making the circuit look unreliable
to ping. But I don't know enough about the underlying technology to be
sure of that. 

-- 
Jeff Shultz
Network Support Technician
Willamette Valley Internet
Not speaking for anyone but myself here.