Attacco di riflesso (Smurf) Ataque por reflexão (Smurf) Smurf-Attacke Attaque par réflexion (Smurf) Ataque Smurf

The smurf technique

The so-called "smurf" technique is based on the use of broadcast servers to paralyze a network. A broadcast server is a server capable of duplicating a message and sending it to all machines present on the same network.

The scenario of such an attack is as follows:

  • the attacking machine sends a ping request (ping is a tool that exploits the ICMP protocol, making it possible to test connections on a network by sending a packet and waiting for the response) to one or more broadcast servers while falsifying the source IP address (the address the server is supposed to respond to in theory) and providing the IP address of a target machine.
  • the broadcast server passes on the request to the entire network;
  • all of the network's machines send a response to the broadcast server,
  • the broadcast server redirects the responses to the target machine.

As such, when the attacking machine sends a request to several broadcast servers located on different networks, all of the responses from computers on the various networks will be routed to the target machine.

Denial-of-service by SMURF

In this way the bulk of the attacker's work involves finding a list of broadcast servers and falsifying the response address in order to direct them to the target machine.

Last update on Thursday October 16, 2008 02:43:15 PM.This document entitled « Smurf attack » from Kioskea (en.kioskea.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the licence, as this note appears clearly.

Best answers for « Smurf attack » in :
Denial of service attack Show Introduction to denial-of-service attacks A "denial-of-service attack" (abbreviated DoS) is a type of attack that aims to make an organization's services or resources unavailable for an indefinite amount of time. Most of the time, these attacks are...
Nuke attack Show Nuke attack Nukes are Window crashes caused by dimwitted users (who know your IP address) who decide to use a Windows 95 (not 98) bug where if someone repeatedly sends information packets to port 139, Windows displays a lovely and impressive blue...
Ping of death attack Show Ping of death attack The ping of death attack is one of the oldest network attacks. The principle of ping of death simply involves creating an IP datagram whose total size exceeds the maximum authorized size (65,536 bytes). When such a packet is...
Save the IP address of visitors of your site ShowSave the IP address of visitors of your site Record the IP address of visitors to your site If you are a victim of an attack or an attempted hack, it may be useful to know who connected on the pages of your site at sepecific...
Do I need a firewall and where can I get one? ShowDo I need a firewall and where can I get one? With all theses malwares ,viruses etc firewalls are absolutely necessary if you use a broadband connection (DSL, Cable, Satellite, etc.). Their aim is to protect you from intrusion and attack...
Download Clean Virus MSN ShowViruses meet hereafter a bit on the net by all thinkable means everywhere. After mails , supporting they attack instantaneous freight forwarding. Clean Virus MSN is a tool which discerns automatically the viruses which circulate on MSN Messenger....
Teardrop attack ShowFragment attack A "fragment attack" is a network saturation (denial-of-service) attack that exploits the fragmentation principle of the IP protocol. The IP protocol is used to fragment large packets into several IP packets each having a sequence...
SYN attack ShowSYN attack The "SYN attack" (also called "TCP/SYN Flooding") is a network saturation (denial-of-service) attack that exploits the Three-way handshake mechanism of the TCP protocol. The three-way handshake is the way in which any "reliable"...
Replay attack ShowReplay attack "Replay" attacks are "Man in the middle" attacks that involve intercepting data packets and replaying them, that is, resending them as is (with no decryption) to the receiving server. As a result, depending on the context, the hacker...