100
votes
Is pinging a website essentially the same as visiting the website through a browser?
They are not the same at all.
A ping request is an ICMP packet which just by default sends null data to check if the host is up (You can change around the parameters being sent (read more here).)
...
- 3,849
26
votes
Is pinging a website essentially the same as visiting the website through a browser?
Is that more or less like visiting the website by typing the hostname into your browser and letting it load?
Short answer, no ... it's not even close.
When you run whois you are doing a lookup of an ...
- 7,912
12
votes
Is pinging a website essentially the same as visiting the website through a browser?
Pinging a website and viewing it in a browser are two absolutely different processes which involve different protocols altogether. Ping sends an ICMP request (response won't be malicious) while ...
- 3,286
11
votes
Is pinging a website essentially the same as visiting the website through a browser?
You can't ping a web site. You can ping a network interface; this sends ICMP ECHO request packets to that interface (and summarizes the replies received).
A web site (in this context) is a server ...
- 1,234
8
votes
Accepted
NMAP discovery scan reporting host offline, pinging the same host gets ICMP responses
If you want to run a ping scan, make sure you are running as root.
From nmap archived docco:
When you run an Nmap ping scan as root, the default is to use the ICMP
and ACK methods. Non-root ...
- 34.3k
7
votes
Why is ping special: why do "unprivileged pings" have to be enabled?
Ping uses a special kind of IP (Internet Protocol) packet known as ICMP (Internet Control Message Protocol), as opposed to the much-more-common UDP (User Datagram Protocol, used for broadcast messages ...
- 50.3k
6
votes
What happens when a firewall blocks a traceroute?
There is no "blocking" of traceroute, tracepath, tracert or whatever the tool gets called. These commands work by setting the TTL/hoplimit of the packet to a specific value and then expect the host to ...
- 205k
6
votes
Is it a bad idea for a firewall to block ICMP?
To be honest it is smart to filter some outbound ICMP both router level and software firewall level as a extra layer of security.
It my not be pertinent to stopping a DoS or DDoS but malicious people ...
- 61
5
votes
Is it a bad idea for a firewall to block ICMP?
Blocking ICMP is not only useless but most cases it is also harmful. There is several reason why you should not block ICMP if you are not absolute sure what you are doing and specially why you are ...
5
votes
Is ping of death attack specific to ICMP or could it also happen with other transport protocols?
The ping of death was caused by a bug in handling invalid packets. Such bugs are not restricted to ICMP but can happen with other protocols too. In fact, the more complex a protocol is the more likely ...
- 205k
4
votes
UDP vs ICMP flood
The main goal of the UDP flood attack is to flood random (or specific) ports on a remote host. A UDP flood attack can be initiated by sending a large number of UDP packets to random ports on a remote ...
- 8,909
4
votes
Is pinging a website essentially the same as visiting the website through a browser?
No. I would say running ping or traceroute on a domain is not a security risk. Furthermore, the ping is done by who.is and not by your computer.
- 32.8k
3
votes
Is it a bad idea for a firewall to block ICMP?
As you can see from the protocol structure, it all depends on the area in which it is used and since firewalls are able to act on type and code parameters, you can decide what to pass through the ...
- 31
3
votes
Investigate compromised Linux server
Given that one packet in the log snippet above, your system is not "pinging" random IPs on the internet. "Pinging" refers to ICMP type 8, an echo request. Looking closer at the ...
- 13.1k
2
votes
Continuous ping on google's servers
Netstat isn't going to show ICMP.
Try installing Microsoft Network Monitor:
https://blogs.technet.microsoft.com/netmon/p/downloads/
Start a capture, filter on ICMP and the destination IP, and you ...
- 389
2
votes
Accepted
Security auditing - disabling IP forwarding and ICMP packets redirects
ICMP redirects are a "feature" of IP which allows a router to inform a host that there's a more efficient route to a destination and that the host should adjust its routing table accordingly. This ...
- 1,062
2
votes
I can't figure out the abnormal behaviour from this Wireshark capture file
There is two things suspicious on the pcap file:
1. as Steffen mention the sequence number looks like is from the same machine, probably the generation of the packets is on a for loop
2. In general, ...
- 2,294
2
votes
Is disabling IPv6 an effective workaround for "Bad Neighbor" Vulnerability (CVE-2020-16898)?
Probably disabling all the IPv6 stack is not a good idea, specially if you have applications that use IPv6. On the other hand, you have the source code of a tool that can generate the issue, so my ...
- 2,294
1
vote
I can't figure out the abnormal behaviour from this Wireshark capture file
In addition, to Steffen Ullrich's answer:
I'm surprised to see so many public IP trying to reach one*** precise private IP via same router ** (the one from where come the dump shown)...
** If your ...
1
vote
I can't figure out the abnormal behaviour from this Wireshark capture file
It is definitely unusual to have ICMP echo requests which are clearly sequential (look at the LE sequence number) but come from different IP addresses. This suggests that there is some central source ...
- 205k
1
vote
In what situations should a node ping/not ping?
ICMP can be dropped for a variety of reasons to protect the service. And there are obviously clear reasons why ICMP is useful.
If you take the stance that you only allow services that you have a ...
- 132k
1
vote
Risks of pinging/resolving malicious sites?
Some authoritative DNS servers may reveal the first 24 bits of an IPv4 address if they are configured with Google's extension EDNS Client Subnet:
In addition, Google Public DNS engineers have ...
- 34.3k
1
vote
Accepted
Risks of pinging/resolving malicious sites?
Doing nslookup will only contact your configured DNS server (and then that server might forward the query to other DNS servers, but not in your name), no packet will arrive from your computer to ...
- 178
1
vote
Smurf Attack confusion
You are the "attacker", not the victim
In the described scenario, it protects your systems from being used to attack some third-party victim. If everybody does this, this also helps potential victims ...
- 8,439
1
vote
How to prevent ICMP redirection produced by a man-in-the-middle
To drop IGMP and ICMP:
iptables -A INPUT -p ICMP -j DROP
iptables -A OUTPUT -p ICMP -j DROP
iptables -A INPUT -p IGMP -j DROP
iptables -A OUTPUT -p IGMP -j DROP
- 580
Only top scored, non community-wiki answers of a minimum length are eligible