ICMP Redirect interpretation

From: bsduser (daryn_lightblade@yahoo.com)
Date: 03/25/02 

From: daryn_lightblade@yahoo.com (bsduser)
Date: 25 Mar 2002 01:32:20 -0800

This is the result of pinging www.yahoo.com :

PING www.yahoo.akadns.net (216.115.102.78): 56 data bytes
36 bytes from a.b.c.d: Redirect Host(New addr: w.x.y.z)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
 4 5 00 0054 0003 0 0000 3e 01 ae30 this.is.my.ip
216.115.102.78

64 bytes from 216.115.102.78: icmp_seq=0 ttl=244 time=249.838 ms
36 bytes from a.b.c.d: Redirect Host(New addr: w.x.y.z)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
 4 5 00 0054 0005 0 0000 3e 01 ae2e this.is.my.ip
216.115.102.78

64 bytes from 216.115.102.78: icmp_seq=1 ttl=244 time=250.041 ms

--- www.yahoo.akadns.net ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 249.838/249.940/250.041/0.101 ms

I'm not sure how to interpret this .. what are all those "redirect
host" packets ? does this mean that a.b.c.d is sending the server ICMP
Redirect packets asking the server to re-route to w.x.y.z ? if so, why
would it be sending them to this host ? a.b.c.d is two hops away, as
can be seen from the traceroute below :

 1 e.f.g.h (e.f.g.h) 19.689 ms 19.890 ms 19.965 ms
 2 a.b.c.d (a.b.c.d) 29.956 ms 29.929 ms 29.967 ms
 3 w.x.y.z (w.x.y.z) 30.019 ms 29.944 ms 29.967 ms
.
.
 7 203.106.225.194 (203.106.225.194) 239.945 ms 289.926 ms 279.973
ms
 8 if-4-0-0.bb2.PaloAlto.Teleglobe.net (207.45.200.33) 299.978 ms
249.912 ms 239.976 ms
 9 if-4-2.core1.PaloAlto.Teleglobe.net (207.45.222.193) 239.968 ms
239.964 ms 239.920 ms
10 ix-5-0.core1.PaloAlto.Teleglobe.net (207.45.196.90) 269.972 ms
249.910 ms 239.967 ms
11 ge-3-3-0.msr1.pao.yahoo.com (216.115.101.42) 239.952 ms 239.906
ms 239.969 ms
12 vl21.bas2.snv.yahoo.com (216.115.100.229) 249.997 ms 239.914 ms
239.978 ms
13 w7.snv.yahoo.com (216.115.102.79) 239.991 ms 239.928 ms 239.962
ms

I'm totally lost. Would appreciate any help. Thanks.

Relevant Pages

  • Small Problem
    ... I need to redirect some packets. ... listening in port 80, because PC A can't use others ports, and PC B ... You have an option to go with a managed service or an enterprise software. ...
    (Pen-Test)
  • Re: Firewall redirect doesnt work any more...
    ... redirect packets that goes through my bridge to a local daemon. ... UDP redirect seems to work with PF: ... but my local daemon never accepts the connection and nc client ... it was the first time I've used jail for squid and also jail are behind the natd. ...
    (freebsd-net)
  • Re: ICMP Redirect interpretation
    ... does this mean that a.b.c.d is sending the server ICMP ... >Redirect packets asking the server to re-route to w.x.y.z? ... >would it be sending them to this host? ...
    (comp.security.unix)
  • iptables -> DNAT & SNAT
    ... i want to redirect everything going to the internet to be redirected ... Chain POSTROUTING (policy ACCEPT 2 packets, ... the firewall, but i will ignore that for now. ...
    (comp.os.linux.security)