[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ICMP Security Failures



>>I've found it useful to describe the possible combinations in terms of
>>a regular expression consisting of IP, AH, and ESP.
>
>Seems to me that any combination of these protocols is possible, if
>not necessarily useful. All three have 8-bit protocol fields in their
>headers that refer to one of the Internet transport protocols,
>including IP (4), AH (51) and ESP (50).

Some combinations may not be possible, due to ambiguities in
processing order.  For example, IP-AH-AH or IP-ESP-AH.


Follow-Ups: References: