Re: UDP Port 7 - trying to understand



"Java and Swing" <codecraig@xxxxxxxxx> writes:

I understand that UDP port 7 is typically used to run echo. What I am
trying to understand is how, by sending numerous packets to port 7, is
this an attack? i.e. how does it cause a problem?

The echo answer packets are larger, and probably more numerous,
than the (ratelimited) ICMP-port-unreachable messages that you'll
get back when no echo service is running.

Thus, for a given load of request packets, more return bandwidth
is consumed.

best regards
Patrick
.



Relevant Pages

  • Re: SYN Attacks - how i cant stop it
    ... > FBSD club, would you please review the following. ... > # control how network packets are handled after IPFW or IPFILTER ... > these MIB. ... > # the two queues which are targeted by this type of attack should ...
    (FreeBSD-Security)
  • Re: SYN Attacks - how i cant stop it
    ... > FBSD club, would you please review the following. ... > # control how network packets are handled after IPFW or IPFILTER ... > these MIB. ... > # the two queues which are targeted by this type of attack should ...
    (freebsd-questions)
  • Re: Port 80 SYN flood-like behavior
    ... > were on the receiving end of such an attack a little over one month ago. ... > across a LARGE number of TCP servers. ... > SYN/ACK packets ... ... Traffic reflection off routers ...
    (Incidents)
  • Re: Questions re WEP encryption
    ... to replay captured APR packets. ... most intrusion detection software never sees it happen. ... active attacks generate wireless traffic that can itself be detected ... and possibly alert the target of the attack. ...
    (alt.internet.wireless)
  • Re: Questions re WEP encryption
    ... to replay captured APR packets. ... subsequent attack on the same data set. ... an IDS (intrusion detection system) which would drop excessive packets ... traffic showed up in the Windows Network Control Panel. ...
    (alt.internet.wireless)