[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ICMP Security Failures
>>I've found it useful to describe the possible combinations in terms of
>>a regular expression consisting of IP, AH, and ESP.
>
>Seems to me that any combination of these protocols is possible, if
>not necessarily useful. All three have 8-bit protocol fields in their
>headers that refer to one of the Internet transport protocols,
>including IP (4), AH (51) and ESP (50).
Some combinations may not be possible, due to ambiguities in
processing order. For example, IP-AH-AH or IP-ESP-AH.
Follow-Ups:
References: