PING (ICMP echo request) is a program that uses ICMP protocol to check whether a remote machine is up. A request is sent by the client, and the server responds with a reply echoing the client's data.
An attacker can echo the client with a large amount of data, causing a buffer overflow. You can protect against such attacks by limiting the allowed size for ICMP echo requests.
Max Ping Size Fields
In this field… |
Do this… |
|---|---|
Action |
Specify what action to take when an ICMP echo response exceeds the Max Ping Size threshold, by selecting one of the following:
|
Track |
Specify whether to log ICMP echo responses that exceed the Max Ping Size threshold, by selecting one of the following:
|
Max Ping Size |
Specify the maximum data size for ICMP echo response. The default value is 1500. |