barak-online.net icmp performance vs. traceroute/tcptraceroute, ssh, ipsec

Scott Weeks surfer at mauigateway.com
Mon May 7 08:14:12 UTC 2007


--- ltd at interlink.com.au wrote:
From: "Lincoln Dale" <ltd at interlink.com.au>
To: "'Joe Maimon'" <jmaimon at ttec.com>

> The standard control plane arguments dont apply 
> when the pattern holds all the way through to 
> equipment under your {remote-}control.
:
: it most certainly does.  lets use an example 
: network of:
:        F
:        |
:A---B---C---D---E
:        |
:        G
:
:
: you are looking at ICMP/traceroute responses 
: through sending traffic to/from A & E.
:
:for all you know, there may be an ICMP DDoS attack 



What about something as simplistic as tcptraceroute?  It won't give you path MTU info, but there're other tools that can.

scott




More information about the NANOG mailing list