[Snort-users] ICMP source quench
goemon at ...20...
Mon Jul 31 14:15:31 EDT 2000
On Mon, 31 Jul 2000, Kyle Sparger wrote:
> It's an ICMP code that a host sends to another to tell it to slow down
> its transmission.
> >From what I understand the IETF apparently deprecated it, so support is no
> longer required.
Theres a very good reason behind it too - a host should not generate MORE
traffic in response to congestion :-)
The correct behaviour is to drop packets and let TCP handle backoff.
More information about the Snort-users