During a DoS test, sending ICMP ECHO requests to the broadcast address corresponds to which type of attack?

During a DoS test, sending ICMP ECHO requests to the broadcast address corresponds to which type of attack?

• A. Fraggle
• B. Smurf
• C. SYN flood
• D. Trinoo

Answer: (B)

This is a Smurf attack. It uses ICMP Echo Requests sent to a network’s broadcast address with the source forged to the victim’s IP. Every host on that network replies to the victim with ICMP Echo Replies, flooding the victim with traffic. The amplification comes from many replies generated from a single request directed at the broadcast address, overwhelming the target’s bandwidth or resources. Fraggle is a UDP-based amplification method using echo or chargen services to broadcast, not ICMP. A SYN flood exhausts the target’s TCP connection table with half-open connections. Trinoo is a distributed DoS tool coordinating traffic across multiple compromised hosts.

This is a Smurf attack. It uses ICMP Echo Requests sent to a network’s broadcast address with the source forged to the victim’s IP. Every host on that network replies to the victim with ICMP Echo Replies, flooding the victim with traffic. The amplification comes from many replies generated from a single request directed at the broadcast address, overwhelming the target’s bandwidth or resources.

Fraggle is a UDP-based amplification method using echo or chargen services to broadcast, not ICMP. A SYN flood exhausts the target’s TCP connection table with half-open connections. Trinoo is a distributed DoS tool coordinating traffic across multiple compromised hosts.