RE: ICMP and UDP flooding

From: Stefan Grey (examplebrain@hotmail.com)
Date: Tue Oct 11 2005 - 07:58:40 GMT-3


First thank you very much for answering this and other my questions. Very
clear and helpfull.

I will try to ask different thing. What could you tell about UDP echos. What
are these for packets???
When I typed access-list 100 permit udp any any eq ? I saw that it has echo
packets but not echo-reply as ICMP. Or it has echo replys. What are this
packets generally used for??

>From: "Luis Rueda" <luis.rueda@comsat.com.co>
>To: "Stefan Grey" <examplebrain@hotmail.com>
>Subject: RE: ICMP and UDP flooding
>Date: Tue, 11 Oct 2005 05:42:49 -0500
>
>Stefan,
>
>Be very carefull with this scenario, I can see where you are going, and
>I don't wanna break NDA, but be carefull with it, QoS can be very
>tricky.....
>
>Luis
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>Stefan Grey
>Sent: Tuesday, October 11, 2005 5:12 AM
>To: ccielab@groupstudy.com
>Subject: ICMP and UDP flooding
>
>HI,
>
>Could anybody give the link. Where could I read about the ICMP and UDP
>flooding attacks and how to prevent them with access-lists??
>
>Do I correctly understand that ?:
>
>1. ICMP flooding is done using echo and echo reply packets.
>2. Udp flooding is done using udp echo packets??? Or not only.
>
>3. To which addresses are this floods usually directed (for
>access-list).
>to the any.any.any.255 addresses of just to any or.... to any broadcast
>addresses or just to one host address????
>
>_________________________________________________________________
>MSN Search Ireland has launched - test-drive it today!
>http://search.msn.ie
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:50 GMT-3