Re: UDP Port 7 - trying to understand



"Java and Swing" <codecraig@xxxxxxxxx> writes:

I understand that UDP port 7 is typically used to run echo. What I am
trying to understand is how, by sending numerous packets to port 7, is
this an attack? i.e. how does it cause a problem?

The echo answer packets are larger, and probably more numerous,
than the (ratelimited) ICMP-port-unreachable messages that you'll
get back when no echo service is running.

Thus, for a given load of request packets, more return bandwidth
is consumed.

best regards
Patrick
.



Relevant Pages

  • Re: SYN Attacks - how i cant stop it
    ... > FBSD club, would you please review the following. ... > # control how network packets are handled after IPFW or IPFILTER ... > these MIB. ... > # the two queues which are targeted by this type of attack should ...
    (FreeBSD-Security)
  • Re: SYN Attacks - how i cant stop it
    ... > FBSD club, would you please review the following. ... > # control how network packets are handled after IPFW or IPFILTER ... > these MIB. ... > # the two queues which are targeted by this type of attack should ...
    (freebsd-questions)
  • Re: Port 80 SYN flood-like behavior
    ... > were on the receiving end of such an attack a little over one month ago. ... > across a LARGE number of TCP servers. ... > SYN/ACK packets ... ... Traffic reflection off routers ...
    (Incidents)
  • Re: my future telephones [telecom]
    ... sample was transmitted every 125 microseconds and, because of circuit ... each sample had the same delay reaching the other end. ... the data folks wanted very long packets. ... to echo depends on two factors, ...
    (comp.dcom.telecom)
  • Re: Questions re WEP encryption
    ... to replay captured APR packets. ... most intrusion detection software never sees it happen. ... active attacks generate wireless traffic that can itself be detected ... and possibly alert the target of the attack. ...
    (alt.internet.wireless)