Re: [tcpm] WG Last Call for ICMP Attacks

[Lars Eggert <[e-mail]>]

On 2009-9-9, at 8:11, Fernando Gont wrote:
> Could you clarify what you have in mind, specificaly? ICMP error
> messages being assigned lower priority than normal traffic, or what?
> FWIW, routers typically rate-limit ICMP errors...

They are also sometimes forwarded at (much) lower priority, and esp.  
some CE devices have huge buffers that when full can lead to seconds  
of delay. (That's one factor why ICMPs may be arriving much later than  
the corresponding TCP segments, there may be others.

(Who knows if some ITU-T transport network architecture defines a  
centralized "control plane signaling generator box" that sends out  
ICMPs on behalf of an entire network, for example. Yes, this is a made- 
up example.)

Lars