North American Network Operators Group
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Historical
Re: Effects of traffic shaping ICMP (&c.)
- From: Craig A. Huegen
- Date: Wed Dec 02 18:05:53 1998
On Wed, Dec 02, 1998 at 03:57:08PM -0500, Mark R. Lindsey wrote:
==>Could traffic shaping, or similar QoS configurations, be used to solve
==>such issues in a more general way? For example, if my source of packet
==>flooding is ICMP, then I'd like to be able to dedicate as much as 1/10th
==>(e.g.) of the bandwidth of each link to ICMP. That's plenty of ICMP, but
==>it's not so much that an attack using ICMP would be effective.
Sure.
Check out my Smurf paper at http://www.quadrunner.com/~chuegen/smurf.html
It has information on using Cisco's Committed Access Rate (CAR) feature
to rate-limit traffic such as ICMP echo/echo-reply and TCP SYNs.
/cah
|
