NUI Maynooth

NUIM ePrints and eTheses Archive

NUIM Library

Analysis of ICMP Quotations

Malone, David and Luckie, Matthew (2007) Analysis of ICMP Quotations. In: Proceedings of the Passive and active network measurement 8th international conference, PAM 2007, April 5-6, 2007, Louvain-la-Neuve, Belgium.

[img] Download (68kB)
Official URL: http://www.springerlink.com/content/q88755hq385633...

Abstract

RFC 792 requires most ICMP error messages to quote the IP header and the next eight bytes of the packet to which the ICMP error message applies. The quoted packet is used by the receiver to match the ICMP message to an appropriate process. An operating system may examine the quoted source and destination IP addresses, IP protocol, and source and destination port numbers to determine the socket or process corresponding to the ICMP message. In an idealised end- to-end Internet, the portion of the packet quoted should be the same as that which was sent, except for the IP TTL, DSCP, ECN bits, and checksum fields. In the modern Internet, this may not always be the case. This paper presents an analysis of ICMP quotations where the quote does not match the probe.

Item Type: Conference or Workshop Item (Paper)
Keywords: ICMP; IPv4 Headers; RTTs; TCP Headers.
Subjects: Science & Engineering > Hamilton Institute
Science & Engineering > Computer Science
Item ID: 1469
Depositing User: Dr. David Malone
Date Deposited: 06 Jul 2009 10:52
Refereed: Yes
URI:

Repository Staff Only(login required)

View Item Item control page

Document Downloads

More statistics for this item...