Snort mailing list archives
RE: ICMP Source Quench
From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Tue, 27 Aug 2002 10:07:35 -0400
An "ICMP Source Quench" message is sent by a host that is receiving datagrams (UDP) at too fast of a rate to process.
Or TCP, or any other IP-based protocol. The SQ doesn't discriminate. This is why we need to know what type of connection existed, and what application was in use before making a determination. But yes, it is an indication of a generally hurting IP stack. ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ICMP Source Quench Sergei Balyakin (Aug 27)
- <Possible follow-ups>
- RE: ICMP Source Quench Dan Fiorito (Aug 27)
- RE: ICMP Source Quench McCammon, Keith (Aug 27)
- RE: ICMP Source Quench Wirth, Jeff (Aug 27)
- RE: ICMP Source Quench McCammon, Keith (Aug 27)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- Re: ICMP Source Quench Chris Keladis (Aug 28)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- RE: ICMP Source Quench Ofir Arkin (Aug 28)
- RE: ICMP Source Quench Hicks, John (Sep 04)