Re: Sparse ICMP/ACK Scans to Broadcast Addresses

[lamont () ICOPYRIGHT COM (Granquist, Lamont)]

On Fri, 5 May 2000, Stephen P. Berry wrote:
> Over the past couple days, I've noticed an odd traffic pattern which
> I haven't observed previously.  The pattern consists of two flavours
> of traffic:
>
>       -An ICMP_ECHO_REQUEST
>       -An ACK

That's an ACK ping, to detect machines that packet filter ICMP.  NMAP is
one scanner that will do these kinds of scans.  I'm not up-to-date on DoS
technology -- is there a DoS tool out there that does TCP smurfs?