Ethereal-dev: RE: [Ethereal-dev] TCP Reset packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Neulinger, Nathan" <nneul@xxxxxxx>
Date: Tue, 11 Dec 2001 10:33:59 -0600
Why don't you just run it through a linux based router and do traffic
shaping?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: Fiach Reid [mailto:fiachreid@xxxxxxxxxxx] 
> Sent: Tuesday, December 11, 2001 10:20 AM
> To: ethereal-dev@xxxxxxxxxxxx
> Subject: [Ethereal-dev] TCP Reset packets
> 
> 
> Hi,
> 
>   I'm doing a project for a small ISP in the US. They want to 
> develop a 
> system to limit bandwidth during peak times. What I was 
> thinking of was to 
> send TCP Reset packets to users consuming too much bandwidth.
> 
>   As I believe, If you try to connect to a server on the 
> wrong port you get 
> a RST packet, which automatically closes the connection.  This is a
> 
> failed TCP connect from
> 
>   193.61.180.128 (C1.3D.B4.80) [bytes 27-30 Packet 1]
>   MAC Address (00-50-Da-41-FA-46) [bytes 7-11 packet 1][bytes 
> 0-6 packet 2]
>   to
>   193.61.228.17 (C1.3D.E4.11) [bytes 31-33 Packet 1]
>   on port 23 (0017) [bytes 37-38 packet 1][NOT packet 2?]
> 
> 
> Packet 1: Ü#6 PÚAúF E  0ZL@ €…nÁ=´€Á=ä ó )º    p  „Ä 
>  ´
> Packet 2: PÚAúF Ü#6 E  8&z  5D>Á=äÁ=´€9¯    E  0ZL@ 
> unÁ=´€Á=ä ó 
> )º
> 
> What suprises me is that there is so many differences between 
> the SYN and 
> RST packet. Have I made a horrible error of judgement here, is the
> second packet ICMP?
> 
>   Please reply to my email address (fiachreid@xxxxxxxxxxx), I 
> need to have 
> an expert on my side on this project. I should mention that this is a 
> commercial project. So at a later date, I could arrange some
> partnership scenario with my client, but this is early days yet.
> 
>   Best Regards.
>   Fiach Reid.
> 
www.eej.ulst.ac.uk/remote-viewer
<a href="http://www.eej.ulst.ac.uk/remote-viewer";>Remote Viewer</a>


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev