Re: ICMP ping effecting network flow?



On Mon, 19 Jun 2006, in the Usenet newsgroup comp.os.linux.networking, in
article <e76n0g$i3b$1@xxxxxxxxxxxxxxxxxx>, Roy L Butler wrote:

Thanks for all of the good info. My specific source stating routers may
be configured to treat ICMP echoes as high-priority packets is section
6.5 of _Wide-Area Data Network Performance Engineering_, by Cole &
Ramaswamy (AT&T engineers), written in 2000. They do mention that the
opposite (lower-priority) is common and I can understand how the whole
thing seems even less plausible on a packet-switching architecture...

That's certainly possible, but I don't see it being used to treat all
packets to/from the host that pinged with higher (or lower) priority.
This is basically saying that all routers along the way would have to
allocate some memory to remember which host has sourced or replied to
a ping in the last second or so. Probably not a big deal for a stub
router in a home situation, but likely to play merry he!! on a
backbone router connecting a couple of OC-3s (155 Megabit fiber) or
wider.

I'll give up the position of devil's advocate. :)

Sounds good.

Old guy
.



Relevant Pages

  • Re: Duplicate Echo Replies with Channel Bonding
    ... In this mode both interfaces receive packets, ... >When both eth0 and eth1 are up and I ping from Host C to Host A I get ... >The destination network 192.168.120.0/24 exists on both Router A and ... Switch B does not have the MAC address in its MAC address table ...
    (RedHat)
  • Re: Ip spoof from 0.0.0.0
    ... - A passive spoofed portscan with the attacker on the local ... segment watching the response packets go out to the default ... If a host responds to the syn packet sourced from 0.0.0.0 with an ack, ... it goes to the router either with the destination IP address rewritten ...
    (Incidents)
  • Re: Weird net connection problem
    ... across the Internet) to throttle or not the traffic). ... Depends how many packets in your connection are lost. ... you connect to some ISP via a router (not a home ADSL one, I should add, ... be advertising to the rest of the Internet, the address of your network, ...
    (uk.comp.sys.mac)
  • Re: [Full-Disclosure] ICMP Covert channels question
    ... what i meant was what if i use the networks router as a bounce ... > internal host will it send the echoreply to its lan port? ... > firewall all I'd have to do is make it send packets to a bounce server ... > outsede the network, like google.com with source set to my ip ...
    (Full-Disclosure)
  • Re: port 0 not stealth
    ... and the less likely they are to just move to the next host. ... the next host in line faster than dropping packets. ... if the ISP configures the router that way. ...
    (comp.security.firewalls)