[3604] in bugtraq

home help back first fref pref prev next nref lref last post

Slow down TCP-connections using spoofed ICMP Source Quench?

daemon@ATHENA.MIT.EDU (Ulrich Flegel)
Sun Nov 10 14:37:56 1996

Date: 	Sun, 10 Nov 1996 13:19:57 +0100
Reply-To: Ulrich Flegel <flegel@ibr.cs.tu-bs.de>
From: Ulrich Flegel <flegel@lorraine.ts.rz.tu-bs.de>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@netspace.org>

Happy people out there!

Have there ever been experiments published, trying to deliberately slow down
TCP-connections by sending spoofed ICMP Source Quench messages to the mainly
sending party?  (This is similar as destination unreachable attacks, but not
that drastic).

If  this  attack  would  be  possible  and  automated,  one  could slow down
connecteions  at will, harrassing people.  It's not really a D.O.S but funny
enough..  (like route's "sloth").

Request for comments....

                   Ulrich.

PS:  If there are publications about this sort of attack, please point me in
the  right  direction.   Otherwise  I'd appreciate your comments, whether is
attack would be applicable.

--
                               ___________________________________________
               Ulrich Flegel  /_  _______________________________________/
 ______________________________/ /_
 \____________________________  __/  A3000-040/25, 16+2MB, A3640, AS330
                             / /    A2060, Merlin 4MB + X-Calibur Digi
    flegel@ibr.cs.tu-bs.de  / /    MFC-3, USR-Sportster Vi, HP-DJ600C
                            \/    HP-C1533A, WTK-51000HT, NEC-CDR512

home help back first fref pref prev next nref lref last post