Hi,
I have a problem to solve. It is about IP defragmentation issues.
I have heard it before, but I don't really care about it in the first place because
simply I don't know what the heck it is eventhough I am working in IT.
But recently we were visited by IT student and ask this question.
I would like to help them but I also want to know about this too because I am working under
IT section looking after our network. So I gues it's worthed to know more on this issues. I ask
them to leave the question and promise to get back to them.
--------------------------
----------
---------
Here is the summary and the question.
There are 5 relevant fields in an IP header.
1. Fragment ID
2. Fragment offset
3. More fragment bit
4. Header length
5. Total datagram length
Assuming the IP packet contain the text "Hello World", it might end up with 2 fragment,
ie (123,0,1,26) - "Hello" and the fragment (123,6,0,20,26) - "World".
There are several buffer overflow exploitation to IP defragmentation due several bugs in several Operating
Systems such as :
a. Ping of death -- what i know is ping server ip with -t (is this right?)
b. Boink and Teardrop -- don't know, sound like title of a movie....
The questions are :
1. How to identify these attack ? (maybe by writing a program or anything else ?)
2. What are the steps or procedures that need to take either to tackle this problem now and
also the future (how to avoid from happening).
I would appreciate if anyone can give me the solution for this and also good sites that
could make me understand well of related issues, but please give me something that easy
to understand. I am not the experts but my staffs use to describe me like that simply
because they don't have anybody else.....
Thanks in advance.
Start Free Trial
