Re: Question on Network Security



axsmth wrote:

Hi,
This is an end-of-chapter question in Comers book "Explain how sending IP
packets to nonexistent addresses on a remote Ethernet can generate
broadcast traffic on that n/w"

As I understand, only one broadcast will be sent out by the router. And
since it does not get a reply, it will drop the packet and send an ICMP
error packet to the original sender.

Is this correct? And suppose all machines on the Ethernet are directly
connected to the Internet, does that change how this works? Thanks

Think what you wrote is fundamentally correct, except that repeat packet
traffic is possible under some circumstances. If the described router
does *not* send an ICMP error packet to the original sender as it is
supposed to do (some do not), then several retries are not uncommon.

ARP is part of DHCP so ARP broadcast traffic only happens on DHCP
networks. Even if an interface effectively has a static IP address, if
that address is assigned under DHCP, then there usually is ARP broadcast
traffic on the local n/w. Exception to this is that ARP tables can be
manually configured.
.



Relevant Pages

  • Re: DHCP serving more than one subnet (longish)
    ... >>destination address is all ones (which means it is a broadcast packet). ... > Responses from the server however rely on the ethernet address only since ... DHCP works over media other than ethernet. ... the case if the request is relayed through a router]. ...
    (comp.os.vms)
  • Re: Regarding dhcp client problem
    ... I have captured the packet information from the device. ... win2k dhcp server sends ... But the dhcp client in the device is not receiving the offer at ... User Datagram Protocol, Src Port: bootpc, Dst Port: bootps ...
    (comp.arch.embedded)
  • Re: DHCP serving more than one subnet (longish)
    ... > packets to allow a host's ethernet layer to pass the packet onto the TCPIP stack. ... DHCP packets are formatted the same as any other IP packet. ... > address nor that of a DHCP server. ...
    (comp.os.vms)
  • DHCP client on PIC Micro
    ... The hardware is a PIC18F6620 and the TCP/IP stack was ... The second router sent a 'bad DHCP ... I compared the DHCP discover packet with the one sent ... out on my windows machine and could find no real difference, ...
    (comp.arch.embedded)
  • Re: DHCP serving more than one subnet (longish)
    ... > DHCP packets are formatted the same as any other IP packet. ... > destination address is all ones (which means it is a broadcast packet). ... of a relay server if the giaddr field is not null. ... > and DHCP requests can certainly be relayed via a router. ...
    (comp.os.vms)