[Dshield] Source Quench?

Samantha Fetter sama at snowplow.org
Fri Aug 8 12:32:13 GMT 2003


Source Quench can also be sent by a host, and not just a gateway.
At one time some years ago one of our mail servers at my work was sending
source quench messages.  It turned out it had somehow gotten set to
half-duplex which ended up causing it.

Cheers,
Samantha

On Fri, 8 Aug 2003, Stephane Grobety wrote:

> KJ> 08/08/2003 13:30:35.880 ICMP packet dropped 213.197.151.250, 4, WAN
> KJ> 212.213.xxx..x, DMZ Source Quench, Code: 0
> KJ> What the heck is going on?
>
> Apparently, it's a source quench message (duh!). This ICMP message is
> sent from one gateway to the other to tell it that it is overloaded
> and that it should slow down the sending of IP packets. It's different
> from the NACK packet that might be sent from one final host to another
> because it's only used between routers (gateways).




More information about the list mailing list