Date: Thu, 26 Aug 1999 20:33:43 -0700 From: Ludwig Pummer <ludwigp@bigfoot.com> To: TrouBle <trouble@hackfurby.com> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@FreeBSD.ORG> Subject: Re: Ummmm ???? HUH ?? (ICMP_BANDLIM) Message-ID: <37C60717.3D4A0981@bigfoot.com> References: <64003B21ECCAD11185C500805F31EC0303787062@houston.matchlogic.com> <37C58FA1.37710788@hackfurby.com> <19990826145822.A7036@dan.emsphone.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Dan Nelson wrote: > It's a message saying that the system is receiving more than 100 ICMP > messages per second, and is throttling responses. This usually > indicates a ping flood. And it's first enabled by putting "options ICMP_BANDLIM" in your kernel config file. I'm not too sure that this message would pop up during a ping flood. According to comments in the source code, (/usr/src/sys/netinet/ip_icmp.c), ICMP_BANDLIM only limits ICMP _error_ responses. A ping flood could cause it if you're ping flooding a nonexistent address. But I get those messages when I'm toying around with nessus (a "security scanner") and I hit ports with nothing listening on them. --Ludwig Pummer <ludwigp@bigfoot.com> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?37C60717.3D4A0981>