[109] in bugtraq
Re: udp packet storms
daemon@ATHENA.MIT.EDU (Chris Ellwood)
Sat Oct 29 23:03:57 1994
From: cellwood@gauss.ELEE.CalPoly.EDU (Chris Ellwood)
To: newsham@zang.kcc.hawaii.edu (Tim Newsham)
Date: Sat, 29 Oct 1994 18:48:11 -0700 (PDT)
Cc: bugtraq@fc.net
In-Reply-To: <9410291924.AA09883@zang.kcc.hawaii.edu> from "Tim Newsham" at Oct 29, 94 09:24:31 am
Tim Newsham said...
> There's at least one way to make a UDP packet storm. Not
> very hard to do:
>
> src address = 255.255.255.255 port 7
> dst address = <some host> port 7
>
> the port will be echoed by the inetd (echo port) back to the
> sender (255.255.255.255 port 7). Each machine with an inetd
> that has echo enabled will echo the packet back to the first
> machine.
This is yet another reason why you should disable echo, discard,
chargen, and any other inetd tcp/udp debugging service. It's
surprising how many people leave those in inetd.conf.
- Chris
