Rate Limiting 3/4
Using Sting & SynAck (SLAC) TCP tools to identify loss(sting or synack probes) << loss(ping)
Find suitable open TCP port (WWW, SMTP, TCP) on host
Keep below scan detection radar
Results:
- www.vincy.bg.ac.yu, www.iisc.ernet.in
- blocked most pings, most synacks OK
- islamabad-server2.comsats.net.pk
- blocked 554 out of 903, stings OK
- leonis.nus.edu.sg
- blocked all non 56B ping packets
- Ns1.waikato.ac.nz
- Blocked 219 of 538 pings, 1 synack block
- Some cases synack loss >> ping
98% of hosts ping tracks synack/sting