[11780] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [nsp] known networks for broadcast ping attacks

daemon@ATHENA.MIT.EDU (Sharif Torpis)
Tue Aug 12 15:03:41 1997

From: "Sharif Torpis" <storpis@pbi.net>
Date: Tue, 12 Aug 1997 11:49:53 -0700
In-Reply-To: Charles Sprickman <spork@inch.com>
        "Re: [nsp] known networks for broadcast ping attacks" (Aug 12,  2:42am)
To: Charles Sprickman <spork@inch.com>, Jon Lewis <jlewis@inorganic5.fdt.net>
Cc: nanog@merit.edu

On Aug 12,  2:42am, Charles Sprickman wrote:
> Subject: Re: [nsp] known networks for broadcast ping attacks
>
> When I type "no ip source route" on a Cisco, what exactly is that doing
> for me?  Is it just disallowing the router itself to generate
> source-routed packets or is it saying sink all source-routed packets?
> All this talk of spoofing is getting me a bit confused.  What exactly is
> the difference between source-routing and spoofing?
>
> Just trying to understand a bit more,

Spoofing is forging a packet's source address. Source routing is including
information in the packet that tells the route the packet should take to get to
its destination.

See ftp://ftp.greatcircle.com/pub/firewalls/FAQ


-- 
Sharif Torpis (storpis@pbi.net)
Network Engineering
Pacific Bell Internet
PGP Key at http://www-swiss.ai.mit.edu/~bal/pks-toplev.html

home help back first fref pref prev next nref lref last post