RE: Ping, ICMP and TCP Ping

["Burton Strauss" <Burton () FelisCatus org>]

You are confusing a protocol (ICMP or TCP) with a program that uses this
protocol (PING or TCP-PING).

What makes it confusing is that while there are many tcp tools, there aren't
many icmp ones (ping and traceroute) - most icmp packets are handled
internally by the tcp/ip stack.


-----Burton 

-----Original Message-----
From: zaka rias [mailto:sciensez () yahoo com] 
Sent: Thursday, August 25, 2005 3:22 AM
To: security-basics () securityfocus com
Subject: Ping, ICMP and TCP Ping

hi,

Im learning protocol tcp/ip and icmp, and as far as i know that Ping
(software) is using ICMP protocol to transmit packets and PING is identic
with ICMP.

I have always wrapped my thinking that ICMP (and Ping
Program) echo/reply was a port 0 thing (like someone said in
http://forum.sans.org/discus/messages/78/10869.html?1110164175
), and that's wrong.

Then i found something called TCP-PING. TCP PING can be described as a TCP
packet with the ACK flag set, destined for port 80 of the target host (Mark
Wolfgang, Host Discovery With NMAP).

i just wonder if this kind of method called TCP-PING, when actually TCP-PING
isnt using ICMP protocol, and once more ->  TCP PING 's using port when
actually PING program is not using a port to communicate.

 

i hope you understand my english



zak


Send instant messages to your online friends http://uk.messenger.yahoo.com