Flashcards

ICMP

moxiehart English 7 cards

Cards in this deck (7)

1ICMPInternet Control Message Protocol
intended as a maintenance protocol for IP vs TCP and UDP
2Normal ICMP error messageshost unreachable
port unreachable
admin prohibited
redirect
fragmentation required
time exceeded
reassembly time exceeded
3Indirect / direct mappingaddress mask request (direct)
echo request/replies (indirect)
4When ICMP traffic should not be sent-in response to another ICMP error
- any destination broadcast address
-any source broadcast address
-any loopback address
-any fragment after fragment #1
- any transient problem
5Malicious uses of ICMPNetwork recon
DOS/DDOS (Smurf/Echo reply attack, WinFreez/ICMP redirect attack)
Covert Channel tunneling (Loki)
Hybrid Attacks (Tribe Food Network)
6Types of mapping with ICMPbrute force
broadcast mapping
icmp range mapping
icmp address map request
7What type of traffic is the greater threat?Egress