Ethereal-dev: RE: [Ethereal-dev] TCP Reset packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Neulinger, Nathan" <nneul@xxxxxxx>
Date: Tue, 11 Dec 2001 10:33:59 -0600
Why don't you just run it through a linux based router and do traffic
shaping?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: Fiach Reid [mailto:fiachreid@xxxxxxxxxxx] 
> Sent: Tuesday, December 11, 2001 10:20 AM
> To: ethereal-dev@xxxxxxxxxxxx
> Subject: [Ethereal-dev] TCP Reset packets
> 
> 
> Hi,
> 
>   I'm doing a project for a small ISP in the US. They want to 
> develop a 
> system to limit bandwidth during peak times. What I was 
> thinking of was to 
> send TCP Reset packets to users consuming too much bandwidth.
> 
>   As I believe, If you try to connect to a server on the 
> wrong port you get 
> a RST packet, which automatically closes the connection.  This is a
> 
> failed TCP connect from
> 
>   193.61.180.128 (C1.3D.B4.80) [bytes 27-30 Packet 1]
>   MAC Address (00-50-Da-41-FA-46) [bytes 7-11 packet 1][bytes 
> 0-6 packet 2]
>   to
>   193.61.228.17 (C1.3D.E4.11) [bytes 31-33 Packet 1]
>   on port 23 (0017) [bytes 37-38 packet 1][NOT packet 2?]
> 
> 
> Packet 1: Ü#6 PÚAúF E  0ZL@ €…nÁ=´€Á=ä ó )º    p  „Ä 
>  ´
> Packet 2: PÚAúF Ü#6 E  8&z  5D>Á=äÁ=´€9¯    E  0ZL@ 
> unÁ=´€Á=ä ó 
> )º
> 
> What suprises me is that there is so many differences between 
> the SYN and 
> RST packet. Have I made a horrible error of judgement here, is the
> second packet ICMP?
> 
>   Please reply to my email address (fiachreid@xxxxxxxxxxx), I 
> need to have 
> an expert on my side on this project. I should mention that this is a 
> commercial project. So at a later date, I could arrange some
> partnership scenario with my client, but this is early days yet.
> 
>   Best Regards.
>   Fiach Reid.
> 
www.eej.ulst.ac.uk/remote-viewer
<a href="http://www.eej.ulst.ac.uk/remote-viewer";>Remote Viewer</a>


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev