[Snort-users] ICMP source quench

Dan Hollis goemon at ...20...
Mon Jul 31 14:15:31 EDT 2000


On Mon, 31 Jul 2000, Kyle Sparger wrote:
> It's an ICMP code that a host sends to another to tell it to slow down
> its transmission.
> >From what I understand the IETF apparently deprecated it, so support is no
> longer required.

Theres a very good reason behind it too - a host should not generate MORE
traffic in response to congestion :-)

The correct behaviour is to drop packets and let TCP handle backoff.

-Dan





More information about the Snort-users mailing list