icmp performance vs. traceroute/tcptraceroute, ssh, ipsec

Scott Weeks surfer at
Mon May 7 08:14:12 UTC 2007

--- ltd at wrote:
From: "Lincoln Dale" <ltd at>
To: "'Joe Maimon'" <jmaimon at>

> The standard control plane arguments dont apply 
> when the pattern holds all the way through to 
> equipment under your {remote-}control.
: it most certainly does.  lets use an example 
: network of:
:        F
:        |
:        |
:        G
: you are looking at ICMP/traceroute responses 
: through sending traffic to/from A & E.
:for all you know, there may be an ICMP DDoS attack 

What about something as simplistic as tcptraceroute?  It won't give you path MTU info, but there're other tools that can.


More information about the NANOG mailing list