[Dshield] Source Quench?
sama at snowplow.org
Fri Aug 8 12:32:13 GMT 2003
Source Quench can also be sent by a host, and not just a gateway.
At one time some years ago one of our mail servers at my work was sending
source quench messages. It turned out it had somehow gotten set to
half-duplex which ended up causing it.
On Fri, 8 Aug 2003, Stephane Grobety wrote:
> KJ> 08/08/2003 13:30:35.880 ICMP packet dropped 18.104.22.168, 4, WAN
> KJ> 212.213.xxx..x, DMZ Source Quench, Code: 0
> KJ> What the heck is going on?
> Apparently, it's a source quench message (duh!). This ICMP message is
> sent from one gateway to the other to tell it that it is overloaded
> and that it should slow down the sending of IP packets. It's different
> from the NACK packet that might be sent from one final host to another
> because it's only used between routers (gateways).
More information about the list