Ping Stuff

[Ryeker]

Have a little problem. I think people are pinging me when I'm playing over the Internet. I cannot figure out anything else that would cause sudden spikes of latency. Problem is, I don't know how to configure my Netgear router to either drop the ping, or forward it to a Linux box (to either drop or log). I would like to know which port a ping uses, so I can tell my router to forward it to a separate Linux machine. I would also like to know how I can capture the pings and log the source. Is this pretty simple to do? Thanks!!!

------------------
ryeker@yahoo.com

[Mountainman]

I dont know if you can do that at the router (I am no router tech), but its called an ICMP packet. If you have a linux box setup as a gateway, you can have it dropped and logged there using ipchains.

------------------
---Meddle not in the affairs of Dragons, for thou art but a snack, and tasty with ketchup---
Http://www.geocities.com/mountainmancentral

[Ryeker]

I'm not a TCP/IP expert... but I'm guessing you cannot forward ICMP packets then? Look at /etc/services, it says port 7 is echo, and I thought that was the 'ping port'. So on my router, I tried to forward port 7 to my Linux box so I could do a host of things. Oh well, thx.

------------------
ryeker@yahoo.com

[Lorithar]

*grins*

Of course you can forward ICMP ... otherwise pinging your favourite game server wouldn't work. However, forwarding ICMP in linux is a separate module. I don't know how configurable your router is, but you should at least be able to turn of and on ICMP forwarding.

Sudden spikes in latency are internet normal. I would be more suspicious of your providers pipe than being pinged. Unless someone is using several dozen computers to ping you at once you aren't gonna see any latency. Ping is one packet per second. Even on -l 1500 that isn't gonna hurt most connections except 28.8 dialups. Pingflood can't be done from plain jane windows, and requires root on linux.

[Ryeker]

I guess I'll have to call Netgear, the maker of my router.

I'm pretty sure it's a ping flood, because I'm pretty sure I know who is doing it. Dunno why, but it always happens when I'm #1???

------------------
ryeker@yahoo.com

[flar]

in ur linux box. configure in ipchains.


ipchains -A input -b -i eth0 -p icmp -s 0/0 -d <ip/netmask> -j DENY


http://www.linuxnewbie.org/ubb/cool.gif

[This message has been edited by flar (edited 10 January 2001).]