barak-online.net icmp performance vs. traceroute/tcptraceroute, ssh, ipsec

Joe Maimon jmaimon at ttec.com
Mon May 7 14:39:47 UTC 2007




Scott Weeks wrote:

> --- ltd at interlink.com.au wrote:
> From: "Lincoln Dale" <ltd at interlink.com.au>
> To: "'Joe Maimon'" <jmaimon at ttec.com>
> 
>>The standard control plane arguments dont apply 
>>when the pattern holds all the way through to 
>>equipment under your {remote-}control.
> 
> :
> : it most certainly does.  lets use an example 
> : network of:
> :        F
> :        |
> :A---B---C---D---E
> :        |
> :        G
> :
> :
> : you are looking at ICMP/traceroute responses 
> : through sending traffic to/from A & E.
> :
> :for all you know, there may be an ICMP DDoS attack 
> 
> 
> 
> What about something as simplistic as tcptraceroute?

My apologies for not making it clear that I had used that tool with the 
same results at the same time on ports 80, 22 and 23. With large and 
small packet sizes.


>  It won't give you path MTU info, but there're other tools that can.
> 
> scott
> 
> 



More information about the NANOG mailing list