[4935] in North American Network Operators' Group
Re: New Denial of Service Attack on Panix
daemon@ATHENA.MIT.EDU (Dima Volodin)
Wed Oct 2 18:23:34 1996
To: bass@cactus.silkroad.com (Tim Bass)
Date: Wed, 2 Oct 1996 18:13:05 -0400 (EDT)
Cc: dvv@sprint.net, kwe@6SigmaNets.com, nanog@merit.edu, iepg@iepg.org
In-Reply-To: <199610022201.SAA00372@cactus.silkroad.com> from "Tim Bass" at Oct 2, 96 06:01:30 pm
From: dvv@sprint.net (Dima Volodin)
Tim Bass writes:
>
> Thanks for pointing out that the UNREACHABLE could just
> be hosts that are turned off. The difficult case,
> now that you mention it, are the UNREACHABLEs due
> to a route flap or other intermediate system blip.
A host being down is _not_ necessarily an UNREACHABLE host. In most
cases you won't see _anything at all_ if a host on an ethernet is down.
A smart router might detect a chronically unresolved ARP and produce an
ICMP_UNREACH, but do you know about routers like that?
> Tim
Dima
