ICMP attacks and ICMP-based routing spoofing

First, ICMP introduction

The full name of ICMP is the Internet Control message Protocol (inter-Network Messaging protocol), an integral part of IP, used to provide error reporting. Once the various types of errors are found to return them to the original host, our most common ping command is based on ICMP.

|-----------------------------------------
| |
| ------ ICMP ECHO request ------ |
| |HOST| -------------> |HOST| |
| | A | <----------------------- | B | |
| | | 如果存活或者没有过滤 | | |
| ------ 将返回ICMP RCHO REPLY ------ |
| |
-----------------------------------------

This mechanism is commonly used by the ping command to detect whether the target host can ping to. The ICMP statistics contain a count of the various types of ICMP messages sent and received, as well as a count of sending and receiving error messages.

Use Show statistics ICMP to view individual statistics.

Display description

Message messages

Errors error message

Destination Unreachable target Unreachable message

Time Exceeded timeout message

Parameter Problems parameter Error message

Source Quenchs Sources Suppression message

REDIRECRS REDIRECT Message

Echos echo Message

Echo Replies Echo Response Message

Timestamps time stamp Message

Timestamp Replies Timestamp Response Message

Address Masks URL Mask Request message

Addressing Mask replies Address Mask Response message