45 Questions
What is the type of the echo-request message?
8
What is the purpose of sending an echo-request message?
To check the host's reachability
What is the type of the timestamp-reply message?
14
What is the code of the timestamp-request and timestamp-reply messages?
0
What can be calculated using the timestamp-request and timestamp-reply messages?
The round-trip time
What is the purpose of the ping command?
To check the host's reachability
What are the two debugging tools that use ICMP for debugging?
ping and traceroute
What is required to synchronize the clocks in two different machines using the timestamp-request and timestamp-reply messages?
The exact transit time
What is the condition for calculating the round-trip time using the timestamp-request and timestamp-reply messages?
The exact transit time is known
Who can send a parameter problem message?
Both the router and the destination host
What is the purpose of the redirection message?
To update the routing table
What is the type of message for a parameter problem?
12
What is the purpose of an echo-request message?
To ping a message to check if the host is alive
Who can send an echo-request message?
Both the router and the host
What is the response to an echo-request message?
Echo-reply message
What is the main purpose of ICMP Query messages?
Error handling and debugging
When is a redirection message sent?
When the packet is sent from the router to the host on the same network
What are the two types of messages used for error handling and debugging?
Echo-request and echo-reply
What does the 'Type' field in the destination unreachable message specify?
The type of message
What is the range of the 'Code' field in the destination unreachable message?
0 to 15
What happens when the destination does not want to process the request?
The destination sends a destination unreachable message
What is the purpose of the source quench message?
To inform the sender that the datagram has been discarded due to congestion
What is the type of the source quench message?
Type 4
What happens when the router is not able to handle the high data rate?
The router sends a source quench message
What is the role of ICMP in the network layer?
To provide feedback about congestion
What is the consequence of not having flow control and congestion control in the network layer?
The sender does not think about the receiver's ability to receive packets
What should the sender do when it receives a source quench message?
Stop or slow down the sending of datagrams
What is the primary function of the Traceroute tool?
To track the route taken by a packet on an IP network
What type of messages does Traceroute use?
ICMP messages
What happens if the TTL value reaches zero?
The packet gets discarded
Why does Traceroute use small TTL values?
To quickly expire the packet
What is the purpose of the TTL value in Traceroute?
To track the route taken by the packet
What happens when the TTL value is 1?
The packet gets discarded by router 1
What is generated by router 1 when the TTL value reaches 0?
A time-exceeded message
What is the purpose of the example in the content?
To illustrate the use of Traceroute
What is the relationship between the TTL value and the router that generates the time-exceeded message?
The TTL value is equal to the number of the router that generates the message
What is the primary purpose of ICMP echo-request and echo-reply messages?
To perform a ping operation
Why is ICMP a connectionless protocol?
Because it does not open a connection with the destination device
What happens when a device is targeted by an ICMP flood attack?
The device is overwhelmed with ICMP echo-request packets
What is the main goal of a ping of death attack?
To crash the targeted device
Why is ICMP not associated with a transport layer protocol?
Because it is a network layer protocol
What is the consequence of a device receiving a ping packet larger than the maximum allowable size?
The device freezes or crashes due to a buffer overflow
What is the main difference between an ICMP flood attack and a ping of death attack?
The size of the packets used
Why is ICMP commonly used in DDoS attacks?
Because it can be used to overwhelm a device with packets
What is a characteristic of ICMP that makes it vulnerable to DDoS attacks?
It does not open a connection with the destination device
Study Notes
Destination Unreachable Message
- Type 3 specifies that the destination is unreachable
- Code (0 to 15) identifies whether the message comes from an intermediate router or the destination itself
- Code 2 or 3 indicates the destination creates the destination unreachable message
- The destination sends the destination unreachable message to the source if it does not want to process the request
Source Quench
- ICMP provides feedback to the sender to slow down the packet transmission rate
- The router sends a source quench message (Type 4, Code 0) to inform the sender to reduce the packet transmission rate due to congestion
- The sender must either stop or slow down the sending of datagrams until the congestion is reduced
Parameter Problems
- The router and destination host send a parameter problem message (Type 12, Code 0 or 1) to indicate improper parameter settings
Redirection
- Redirection message updates the routing table and informs the sender to use a better route
- The router sends a redirection message to the host on the same network
- The host updates its routing table to use the better route
ICMP Query Messages
- ICMP query messages are used for error handling and debugging
- Echo-request (Type 8, Code 0) and echo-reply (Type 0, Code 0) messages check host reachability and operation of IP protocol
- Timestamp-request (Type 13, Code 0) and timestamp-reply (Type 14, Code 0) messages calculate round-trip time and synchronize clocks
Debugging Tools
- Ping uses ICMP echo-request and echo-reply messages to check host reachability
- Traceroute tracks the route taken by a packet on an IP network from source to destination
- Traceroute uses ICMP messages and TTL values to determine the location of routers
How ICMP Works
- ICMP is a connectionless protocol and does not require a transport layer protocol (TCP/UDP)
- ICMP does not open a connection before sending a message
- ICMP does not allow targeting a specific port on a device
ICMP in DDoS Attacks
- ICMP flood attack: the attacker overwhelms a targeted device with ICMP echo-request packets, consuming its computing resources
- Ping of death attack: the attacker sends a ping larger than the maximum allowable size, causing the machine to freeze or crash
This quiz covers the different fields in a Destination Unreachable message, including Type and Code, and how they are used in network communication.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
