nanog mailing list archives

RE: barak-online.net icmp performance vs. traceroute/tcptraceroute, ssh, ipsec


From: "Scott Weeks" <surfer () mauigateway com>
Date: Mon, 7 May 2007 01:14:12 -0700


--- ltd () interlink com au wrote:
From: "Lincoln Dale" <ltd () interlink com au>
To: "'Joe Maimon'" <jmaimon () ttec com>

The standard control plane arguments dont apply 
when the pattern holds all the way through to 
equipment under your {remote-}control.
:
: it most certainly does.  lets use an example 
: network of:
:        F
:        |
:A---B---C---D---E
:        |
:        G
:
:
: you are looking at ICMP/traceroute responses 
: through sending traffic to/from A & E.
:
:for all you know, there may be an ICMP DDoS attack 



What about something as simplistic as tcptraceroute?  It won't give you path MTU info, but there're other tools that 
can.

scott


Current thread: