The Technique Research On Gathering Network Information Based On ICMP

Internet Control Message Protocol (ICMP), as a control protocol of TCP/IP stacks, has been found some leaks in its protocol standard. How to utilize these leaks to develop host detecting and information scanning technique in network countermeasure is proposed in this paper. The principle and flow of programmed software tool are also given in this paper. The main content consists of several aspects as follows:· ICMP Messages are used to do host detection.· ICMP Error Messages are used to detect the ACL of packet filtering devices on the target subnet.· ICMP Messages are used to gain the path from detecting host to the destination. This part is focused on using the faultiness of ACL configuration to get across firewall or packet filtering devices.· ICMP Messages are also used to gain the type of operating system of destination host. "Fingerprinting Detection" technique is mainly used in this part.A software tool based on the conclusion drawn above is implemented by programming with C language on Linux platform. This software tool patches up the deficiency of developing ICMP API functions in various kinds of OS platforms. In addition, an OS fingerprinting type base of ICMP protocol is brought forward to provide a guarantee for procedure's upgrading and maintenance in the future. At the end of this paper, the significance of research on protocol safety is discussed and expectation of intending research is also presented.