[140] in bugtraq
Re: udp packet storms
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Nov 1 11:46:55 1994
To: Steve Simmons <scs@lokkur.dexter.mi.us>
Cc: bugtraq@fc.net
In-Reply-To: Your message of "Tue, 01 Nov 1994 07:30:09 EST."
<199411011230.HAA06342@lokkur.dexter.mi.us>
Reply-To: perry@imsi.com
Date: Tue, 01 Nov 1994 09:05:20 -0500
From: "Perry E. Metzger" <perry@imsi.com>
Steve Simmons says:
> This leads to a bug I've literally been afraid to test:
>
> How about forging a ping packet with source and destination
> address YOUR.NET.HERE.255? Should cause a brief but interesting
> storm, while doing only minimal loading on the forger.
The RFCs specify that you must never respond to an ICMP request with a
broadcast. However, this may work with UDP echo ports on hosts with
defective behavior of the sort we've just been noting.
Perry
