A question about IP multicast

johnifanx98johnifanx98 Member Posts: 329
RFC 1112
http://datatracker.ietf.org/doc/rfc1112/


7.2 Extensions to the IP module
An incoming datagram is not rejected for having an IP time-to-live of 1 (i.e., the time-to-live should not automatically be decremented on arriving datagrams that are not being forwarded).
Is the above just too obvious?
An incoming datagram with an IP host group address in its source address field is quietly discarded.
Is it possible for a datagram to have host group address in source addr field?

Comments

  • instant000instant000 Member Posts: 1,745
    RFC 1112
    RFC 1112


    7.2 Extensions to the IP module
    "An incoming datagram is not rejected for having an IP time-to-live of 1 (i.e., the time-to-live should not automatically be decremented on arriving datagrams that are not being forwarded). "

    Is the above just too obvious?

    Hahahaha. Yeah, it does seem kind of obvious you wouldn't discard something that you want.
    "An incoming datagram with an IP host group address in its source address field is quietly discarded. "

    Is it possible for a datagram to have host group address in source addr field?

    I immediately think of malicious intent: that is, forgery of the source address. I cannot envision a "normal" way this could occur.
    Currently Working: CCIE R&S
    LinkedIn: http://www.linkedin.com/in/lewislampkin (Please connect: Just say you're from TechExams.Net!)
  • APAAPA Member Posts: 959
    RFC 1112
    RFC 1112


    7.2 Extensions to the IP module


    Is the above just too obvious?


    Is it possible for a datagram to have host group address in source addr field?

    1) The statement is tying together multiple areas in the RFC....

    - A multicast datagram can be sent with a TTL of 1 if it is expected to NOT go past the local network or if the upper-layer protocol does not specify a TTL therefore an explicit choice is required by the receiving gateway to forward it past a local network and onto other multicast gateways...

    - It is possible for a host to receive a multicast datagram for a group that it is not a multicast member of (think of how the Multicast group address, maps into the multicast mac address... meaning multiple groups can share the same multicast mac address), therefore in this odd scenario(should rarely happen)..... the multicast datagram would have a TTL of 1, however on this occasion the receiving host should not decrement TTL like it would for a normal unicast datagram, but rather the packet should be silently discarded, meaning no repsonse with an ICMP error message (TTL, destination unreachable etc)

    - Therefore the statement you highlighted, seems blatantly obvious.....if the packet was indeed intended for the host.... however what would happen if it wasn´t? Hence the statement stresses that the TTL shouldn´t be decremented for the two reasons I provided above....


    2) Yeah it comes down to IP spoofing protection..... read section 6.2 last paragraph

    '¨A host group address must never be placed in the source address field or anywhere in a source route or record route option of an outgoing IP datagram¨

    CCNA | CCNA:Security | CCNP | CCIP
    JNCIA:JUNOS | JNCIA:EX | JNCIS:ENT | JNCIS:SEC
    JNCIS:SP | JNCIP:SP
Sign In or Register to comment.