Re: Stealthing



In article <bb4v82tmn9d7ui1ehktt6335aetm1uadfi@xxxxxxx>,
B. Nice <b__nice@xxxxxxxxxxx> wrote:
On Tue, 13 Jun 2006 23:28:54 GMT, roberson@xxxxxxxxxxxx (Walter
Roberson) wrote:

If you could provide a technical definition of 'stealthed' then
we might be able to answer the question. Different people mean different
things by it, and the answer will be different depending on the
definition.

I was referring to "stealthed" in the meaning: not responding to ICMP
requests.

In that case the answer to my question must obviously be: no response.

Note, though, that some common ping programs use TCP or UDP instead
of ICMP. My answer is nearly the same for those, except I would remove
the note about ICMP Unreachable (3) Subtype 3 (Port Unreachable)
not being possible, and would add it into the list of possibles.

But if you define "stealthed" in terms of ICMP, and your ping works
in terms of TCP or UDP, then you might get a response of some sort...
.



Relevant Pages

  • Re: Successful remote AES key extraction
    ... To answer objections that ICMP packets might take slower paths through ... using TCP or UDP. ... L2 cache misses are more costly, but the rest of a real ...
    (sci.crypt)
  • WIZnet Chip W3100as TCP/IP Support
    ... that they are supporting TCP, UDP, IP, ICMP etc. ... But i want the detailed features what they support in TCP/IP. ... Time Exceeded, ICMP Echo Request or Reply, ICMP Address ...
    (comp.arch.embedded)
  • WIZZnet Chip W3100as TCP/IP Support
    ... that they are supporting TCP, UDP, IP, ICMP etc. ... But i want the detailed features what they support in TCP/IP. ... Time Exceeded, ICMP Echo Request or Reply, ICMP Address ...
    (comp.arch.embedded)
  • Re: Revised list of IPs used by Spyware and Adware (Was: bear share and zone alarm)
    ... ICMP messages really aren't anything to worry about. ... Filtering TCP and UDP ...
    (comp.security.firewalls)
  • natd, ipfw problem
    ... redirect_port udp 192.168.0.2:53 53 ... redirect_port tcp 192.168.0.2:53 53 ... add 00601 allow udp from any to any 53 keep-state via sis0 ... add 00701 allow icmp from any to any out icmptypes 8 ...
    (freebsd-questions)