Hi,
I'm doing a project for a small ISP in the US. They want to develop a
system to limit bandwidth during peak times. What I was thinking of was to
send TCP Reset packets to users consuming too much bandwidth.
As I believe, If you try to connect to a server on the wrong port you get
a RST packet, which automatically closes the connection. This is a
failed TCP connect from
193.61.180.128 (C1.3D.B4.80) [bytes 27-30 Packet 1]
MAC Address (00-50-Da-41-FA-46) [bytes 7-11 packet 1][bytes 0-6 packet 2]
to
193.61.228.17 (C1.3D.E4.11) [bytes 31-33 Packet 1]
on port 23 (0017) [bytes 37-38 packet 1][NOT packet 2?]
Packet 1: Ü#6 PÚAúF E 0ZL@
nÁ=´Á=äó )º p Ä ´
Packet 2: PÚAúF Ü#6 E 8&z 5D>Á=äÁ=´9¯ E 0ZL@ unÁ=´Á=äó
)º
What suprises me is that there is so many differences between the SYN and
RST packet. Have I made a horrible error of judgement here, is the
second packet ICMP?
Please reply to my email address (fiachreid@xxxxxxxxxxx), I need to have
an expert on my side on this project. I should mention that this is a
commercial project. So at a later date, I could arrange some
partnership scenario with my client, but this is early days yet.
Best Regards.
Fiach Reid.
www.eej.ulst.ac.uk/remote-viewer
<a href="http://www.eej.ulst.ac.uk/remote-viewer";>Remote Viewer</a>
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
