Smurf Attacks

February 19th, 2008 by webstersprodigy

Speaking of spoofing IP addresses…

The smurf attack is old and outdated, but still interesting ddos attack.  An attacker broadcasts spoofed ICMP Echo Requests.  The spoofed address is the intended target, as the idea is that everyone will reply to the same guy and potentially flood him with echo response packets.  By using a large broadcast network, there could be a large number of hosts pinging at once.  The code for smurf is at http://www.phreak.org/archives/exploits/denial/smurf.c.

There are protections you can put in your firewall/gateway to prevent these, but it’s still an interesting attack, since it is so simple and easy.

Leave a Reply


No computers were harmed in the 0.187 seconds it took to produce this page.