From owner-freebsd-questions Fri Dec 15 11:14:24 2000 From owner-freebsd-questions@FreeBSD.ORG Fri Dec 15 11:14:23 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from ptavv.es.net (ptavv.es.net [198.128.4.29]) by hub.freebsd.org (Postfix) with ESMTP id 1253037B402 for ; Fri, 15 Dec 2000 11:14:19 -0800 (PST) Received: from ptavv.es.net (localhost [127.0.0.1]) by ptavv.es.net (8.10.1/8.10.1) with ESMTP id eBFJEGJ19767; Fri, 15 Dec 2000 11:14:16 -0800 (PST) Message-Id: <200012151914.eBFJEGJ19767@ptavv.es.net> To: David Kelly Cc: freebsd-questions@FreeBSD.ORG Subject: Re: use of 1500 octet pings? In-reply-to: Your message of "Wed, 13 Dec 2000 17:07:41 CST." Date: Fri, 15 Dec 2000 11:14:16 -0800 From: "Kevin Oberman" Sender: oberman@ptavv.es.net Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Date: Wed, 13 Dec 2000 17:07:41 -0600 > From: David Kelly > Sender: owner-freebsd-questions@FreeBSD.ORG > > Watching reject messages on firewalls lately I've seen ICMP ECHO > requests from web sites somebody is visiting, trying to packets of > echo 1500 octets off us. What the heck are they trying to do? I can't > guess an honest excuse for websites to ping visitors. And with such > large packets. PMTU discovery? They may well be sending larger pings, but they don't get to you. 1500 octets is probably the largest packet that can make it to you without fragmentation. R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman@es.net Phone: +1 510 486-8634 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message