Google Answers Logo
View Question
 
Q: What is a ping attack? ( Answered 5 out of 5 stars,   2 Comments )
Question  
Subject: What is a ping attack?
Category: Computers > Security
Asked by: kalima-ga
List Price: $5.00
Posted: 24 Mar 2003 20:41 PST
Expires: 23 Apr 2003 21:41 PDT
Question ID: 180535
What exactly is a ping attack?  I have a personal firewall and every
now and again it registers a "ping" attack.  What is this?
Answer  
Subject: Re: What is a ping attack?
Answered By: tisme-ga on 24 Mar 2003 21:16 PST
Rated:5 out of 5 stars
 
Hello kalima,

First, it is important to understand what a 'ping' is. A ping is
generally a command issued by a person on Computer A to Computer B. If
Computer B replies to the 'ping', then we know that data is able to
move from Computer A to Computer B.

What is a Ping? "Ping is used to test whether the remote host can be
reached from your computer. This simple function is extremely useful
for testing network connection, by transmitting a request message to a
specified system and receiving a reply, you will know if the network
hardware is functioning on both computers or the link between the two
systems is unbroken and etc."
Source: http://members.fortunecity.com/ramgs/rping20.html

If you are still able to surf the internet while the ping attack is
happening, then the attack is really having no effect on you. Ping
attacks used to work so that Computer A could flood Computer B with so
many ping requests, that it would use up all the internet bandwidth on
Computer B. With high speed connections however, (including 56k modems
to some extent), ping attacks are not as effective anymore.

It is still possible to flood a network with ping requests, but
generally it requires hundreds if not thousands of computers to bring
down a major network. Your personal firewall might be reporting a
valid ping attack, or it might be a bit too sensitive. There is
nothing illegal or wrong about pinging a computer on the internet.

To demonstrate how a ping/ping attack can work (on a Windows PC):
Click on Start and then click on Run.
Type in cmd.exe and hit enter. This should bring up a command prompt.
Type in ping www.google.com and hit enter.
What you should see is www.google.com replying to your ping (4 times).

If you are finding that your internet connection is actually suffering
while these ping attacks happens, your firewall should report one or
more IP addresses (four numbers separated by three decimals) and you
can use these to find out where the ping attack is coming from (this
website is but one example:
http://www.urgentclick.com/address_trace.php ). You might want to
contact your ISP to ask what you can do about ping attacks, one
possible solution is getting a different IP address.

To summarize, a ping is a diagnostic check to see if a data stream is
open between two computers. If a person pings you without stopping,
usually using many computers, this could affect your internet
connection because your computer will be busy replying to all the ping
requests, therefore using up your internet bandwidth. Intentionally
pinging another computer with the intent to disrupt the network is
what a ping attack is.

It could very well be the case that your firewall is a bit too
sensitive and is reporting a ping attack, when a website, application
or service could have a valid reason for pinging you. In fact it is
highly likely that this is the case. If you are not noticing a
degrading of your internet connection when these attacks happen, this
is probably not something you need to be worried about.

Please let me know if you need any clarifications regarding this
answer and I will do my best to further assist you.

tisme-ga


Search Strategy: 

"what is a ping"
://www.google.com/search?q=%22what+is+a+ping%22

ping attacks OR attack
://www.google.com/search?q=ping+attacks+OR+attack

ip address trace
://www.google.com/search?q=ip+address+trace
kalima-ga rated this answer:5 out of 5 stars
A very indepth answer.  Thank you very much.

Comments  
Subject: Re: What is a ping attack?
From: hailstorm-ga on 25 Mar 2003 00:38 PST
 
For more information about ping so simple a child could understand,
check out "The Story of Ping" by Majorie Flack.  An in-depth review
can be found on the Slashdot site at
http://books.slashdot.org/article.pl?sid=99/01/31/1246212&mode=thread
Subject: Re: What is a ping attack?
From: flajason-ga on 25 Mar 2003 05:06 PST
 
Truly malicious ping attacks will alter the TTL (Time to Live) setting
on their ping attacks.
http://www.cbs-soft.com/TTL.htm
TTL determines how long the packet lives before being discarded. By
default, it should be 128 (on most Windows systems). If there are more
than 128 "stops" between you and the target computer, the packet will
die during transmission.
By extending the TTL, it allows more time for the packet to take up
bandwidth and therefore has a stronger form of attack.
http://compnetworking.about.com/library/weekly/aa100700b.htm

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy