Search String: Display: Description: Sort:

Results:

References: [ +subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*IP\-ID\s+field\s+of\s+ICMP\s+echo\s+request\s*$/: 14 ]

Total 14 documents matching your query.

1. IP-ID field of ICMP echo request (score: 1)
Author: s Administrator" <postmaster@xxxxxxxxx>
Date: Mon, 07 Jul 2003 20:37:31 +0900
Hi folks, I found a strange packet, which is generated by ping of Linux. It is observed ID field of IP header in ping packet (Echo request) is always 0. I confirmed this on kernel 2.4.18 and 2.4.21.
/archives/netdev/2003-07/msg00069.html (7,738 bytes)

2. Re: IP-ID field of ICMP echo request (score: 1)
Author: xxxxxxxx>
Date: Mon, 7 Jul 2003 14:29:28 +0200 (CEST)
If code = 0, an identifier to aid in matching echos and replies, may be zero. ... I guess it is okay to have 0 as IPID. Regards, Maciej
/archives/netdev/2003-07/msg00070.html (8,348 bytes)

3. Re: IP-ID field of ICMP echo request (score: 1)
Author: ciej Soltysiak <solt@xxxxxxxxxxxxxxxxx>
Date: Mon, 07 Jul 2003 21:39:30 +0900 (JST)
No, he is not talking about ICMP Identifier (RFC792 Page 14), but IP Identification (RFC791 Page 29). --yoshfuji
/archives/netdev/2003-07/msg00071.html (9,193 bytes)

4. Re: IP-ID field of ICMP echo request (score: 1)
Author: ideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
Date: Mon, 7 Jul 2003 14:48:41 +0200 (CEST)
Aah, yes, I misread. Sorry. Anyway I tested it on 2.4.2 and 2.4.18, 2.5.74 and 2.4.21, they set IP ID to 0. At first I thought it was that issue with early 2.4, but it seems it has been there for a
/archives/netdev/2003-07/msg00072.html (8,684 bytes)

5. Re: IP-ID field of ICMP echo request (score: 1)
Author: xxxx>
Date: Mon, 07 Jul 2003 22:11:19 +0900 (JST)
It seems linux-2.2.22 behaves similarly. Well..., I remember the DF bit. Kohei, add "-M dont" option (do not set DF flag) and we can see non-zero IPID, can't we? -- Hideaki YOSHIFUJI @ USAGI Project
/archives/netdev/2003-07/msg00073.html (9,261 bytes)

6. Re: IP-ID field of ICMP echo request (score: 1)
Author: xx>
Date: 07 Jul 2003 15:40:36 -0300
Hi, Kohei, I guess this behaviour is to prevent Idle scanning, that is based on predictable IPID numbers [1]. Therefore, the Linux TCP/IP stack uses 0 as IPID when the DF (Don't Fragment) bit is set.
/archives/netdev/2003-07/msg00080.html (8,501 bytes)

7. Re: IP-ID field of ICMP echo request (score: 1)
Author: ug McNaught <doug@xxxxxxxxxxxx>
Date: Tue, 08 Jul 2003 10:59:00 +0900
Thanks for your helpful information. I understood the reason. That is great. Kohei.
/archives/netdev/2003-07/msg00093.html (9,177 bytes)

8. IP-ID field of ICMP echo request (score: 1)
Author: Kohei OHTA <kohei@xxxxxxxxxx>
Date: Mon, 07 Jul 2003 20:37:31 +0900
Hi folks, I found a strange packet, which is generated by ping of Linux. It is observed ID field of IP header in ping packet (Echo request) is always 0. I confirmed this on kernel 2.4.18 and 2.4.21.
/archives/netdev/2003-07/msg00758.html (7,738 bytes)

9. Re: IP-ID field of ICMP echo request (score: 1)
Author: Maciej Soltysiak <solt@xxxxxxxxxxxxxxxxx>
Date: Mon, 7 Jul 2003 14:29:28 +0200 (CEST)
If code = 0, an identifier to aid in matching echos and replies, may be zero. ... I guess it is okay to have 0 as IPID. Regards, Maciej
/archives/netdev/2003-07/msg00759.html (8,396 bytes)

10. Re: IP-ID field of ICMP echo request (score: 1)
Author: YOSHIFUJI Hideaki / <yoshfuji@xxxxxxxxxxxxxx>
Date: Mon, 07 Jul 2003 21:39:30 +0900 (JST)
No, he is not talking about ICMP Identifier (RFC792 Page 14), but IP Identification (RFC791 Page 29). --yoshfuji
/archives/netdev/2003-07/msg00760.html (9,297 bytes)

11. Re: IP-ID field of ICMP echo request (score: 1)
Author: Maciej Soltysiak <solt@xxxxxxxxxxxxxxxxx>
Date: Mon, 7 Jul 2003 14:48:41 +0200 (CEST)
Aah, yes, I misread. Sorry. Anyway I tested it on 2.4.2 and 2.4.18, 2.5.74 and 2.4.21, they set IP ID to 0. At first I thought it was that issue with early 2.4, but it seems it has been there for a
/archives/netdev/2003-07/msg00761.html (8,830 bytes)

12. Re: IP-ID field of ICMP echo request (score: 1)
Author: YOSHIFUJI Hideaki / <yoshfuji@xxxxxxxxxxxxxx>
Date: Mon, 07 Jul 2003 22:11:19 +0900 (JST)
It seems linux-2.2.22 behaves similarly. Well..., I remember the DF bit. Kohei, add "-M dont" option (do not set DF flag) and we can see non-zero IPID, can't we? -- Hideaki YOSHIFUJI @ USAGI Project
/archives/netdev/2003-07/msg00762.html (9,422 bytes)

13. Re: IP-ID field of ICMP echo request (score: 1)
Author: Ulisses <ra993482@xxxxxxxxxxxxx>
Date: 07 Jul 2003 15:40:36 -0300
Hi, Kohei, I guess this behaviour is to prevent Idle scanning, that is based on predictable IPID numbers [1]. Therefore, the Linux TCP/IP stack uses 0 as IPID when the DF (Don't Fragment) bit is set.
/archives/netdev/2003-07/msg00769.html (8,564 bytes)

14. Re: IP-ID field of ICMP echo request (score: 1)
Author: Kohei OHTA <kohei@xxxxxxxxxx>
Date: Tue, 08 Jul 2003 10:59:00 +0900
Ulisses, Thanks for your helpful information. I understood the reason. That is great. Kohei.
/archives/netdev/2003-07/msg00782.html (9,336 bytes)

Current List: 1 - 14
Page: [1]
This search system is powered by Namazu