RE: Flood ping

In a normal situation when a machine pings another host from valid (return
address to itself)  , the pinged machine sends the acknowlegement back and
it in turn gets acknowlegement from source machine. So the sync/ack/n(ack)
conversation/session is completed successfully and the connection closes.
 
But if the source ping machine pings another machine with a "false" return
address then , then pinged machine sends the acknowledgement but never gets
any response for this(since the return address is not a valid address) . So
the session is kept open. When 100s and 1000s of such pings are sent then
there will lot of sessions open on destination machine and it eventually
brings down that machine (or whichever pingable device).
 
Mahesh

-----Original Message-----
From: Harry Hambi [mailto:[email protected]]
Sent: Thursday, June 10, 2004 10:15 AM
To: [email protected]
Subject: Flood ping



Hi all, 
Can somebody explain what flood ping is, more importantly what it can tell
you about your network. 

Rgds. 


Harry. 


http://www.bbc.co.uk/ - World Wide Wonderland

This e-mail (and any attachments) is confidential and may contain
personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. 
Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the
BBC monitors e-mails sent or received. 
Further communication will signify your consent to this. 

-----  This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission. If
you receive this message in error, please delete it and all copies from your
system, destroy any hard copies and notify the sender. You must not,
directly or indirectly, use, disclose, distribute, print, or copy any part
of this message if you are not the intended recipient. Nomura Holding
America Inc., Nomura Securities International, Inc, and their respective
subsidiaries each reserve the right to monitor all e-mail communications
through its networks. Any views expressed in this message are those of the
individual sender, except where the message states otherwise and the sender
is authorized to state the views of such entity. Unless otherwise stated,
any pricing information in this message is indicative only, is subject to
change and does not constitute an offer to deal at any price quoted. Any
reference to the terms of executed transactions should be treated as
preliminary only and subject to our formal written confirmation.

_______________________________________________
Valhalla-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/valhalla-list