Ping shaping/blocking
First noticed in 1996
- protect against ping o’death (OS) & smurf attacks (directed broadcasts)
Host requirement to implement ping
- but not to execute, and probably blocked at firewall
First step for cracker scanning a site
Identified at 2% hosts (i.e. a small effect)
We choose remote hosts
- work with contacts to accommodate
http://www.slac.stanford.edu/comp/net/wan-mon/pathology.html