Snort mailing list archives
RE: ICMP Source Quench
From: "Wirth, Jeff" <WirthJe () DNB com>
Date: Tue, 27 Aug 2002 09:41:24 -0400
From: Sergei Balyakin [mailto:sergei () rsl ru] Hi! Does anyone knows what it means. Too many messages last some days. Thankx in advance. [**] ICMP Source Quench [**] 08/26-11:26:25.412038 195.161.172.228 -> 213.152.133.10 ICMP TTL:247 TOS:0x0 ID:45317 IpLen:20 DgmLen:56 Type:4 Code:0 SOURCE QUENCH 00 00 00 00 45 00 05 DC 5F C5 40 00 36 06 27 DF ....E..._.@.6.'. D5 98 85 0A D9 6B 83 69 00 50 04 04 29 71 38 2C .....k.i.P..)q8,
An "ICMP Source Quench" message is sent by a host that is receiving datagrams (UDP) at too fast of a rate to process. *Could* be an indication of a server under heavy load. - Jeff ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ICMP Source Quench Sergei Balyakin (Aug 27)
- <Possible follow-ups>
- RE: ICMP Source Quench Dan Fiorito (Aug 27)
- RE: ICMP Source Quench McCammon, Keith (Aug 27)
- RE: ICMP Source Quench Wirth, Jeff (Aug 27)
- RE: ICMP Source Quench McCammon, Keith (Aug 27)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- Re: ICMP Source Quench Chris Keladis (Aug 28)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- RE: ICMP Source Quench Hicks, John (Sep 04)