RE: ICMP Well-Known Port

From: Matt Carothers (mattat_private)
Date: Fri Oct 01 1999 - 05:53:54 PDT

Next message: Stan Scalsky: "Re: BigIP controller - any issues?"

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 30 Sep 1999 GibsonBat_private wrote:

> Paul,
> 
> Actually echo does not use ICMP.  It uses UDP(normally).  Traceroute(under
> Unix) uses echo to determine route paths while Ping uses Icmp to determine
> verious status information.

By default, unix traceroute works by hurling UDP packets with successively 
higher TTLs at high-numbered ports and waiting for time exceeded and port 
unreachable ICMPs.  It can also work by sending ICMP echo requests instead
of UDP packets.

Check out http://www.packetfactory.net/firewalk/firewalk-final.html for a
good description of traceroute and some interesting ways to abuse it.

- Matt

Next message: Stan Scalsky: "Re: BigIP controller - any issues?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:42:05 PDT