Snort mailing list archives

RE: ICMP Source Quench


From: "Wirth, Jeff" <WirthJe () DNB com>
Date: Tue, 27 Aug 2002 09:41:24 -0400


From: Sergei Balyakin [mailto:sergei () rsl ru]

Hi!

Does anyone knows what it means. Too many messages last some days.
Thankx in advance.

[**] ICMP Source Quench [**]
08/26-11:26:25.412038 195.161.172.228 -> 213.152.133.10
ICMP TTL:247 TOS:0x0 ID:45317 IpLen:20 DgmLen:56
Type:4  Code:0  SOURCE QUENCH
00 00 00 00 45 00 05 DC 5F C5 40 00 36 06 27 DF  ....E..._.@.6.'.
D5 98 85 0A D9 6B 83 69 00 50 04 04 29 71 38 2C  .....k.i.P..)q8,

An "ICMP Source Quench" message is sent by a host that is receiving
datagrams (UDP) at too fast of a rate to process.  *Could* be an indication
of a server under heavy load.

- Jeff


-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: