I just ran a ping on my Linux while doing a tcpdump. It still uses icmp, both with a flood and without. I ran from a windows box and the same. The basic windows ping command won't let you flood (the -f is for fragmentation). I think your friend is wrong. However, he/she might be confusing pings for traceroutes. In window tracert will use ICMP traffic, but on a unix box it will use UDP traffic.
"KW S" cc: Sent by: Subject: icmp [7:66827] [EMAIL PROTECTED] .com 04/04/2003 03:45 AM Please respond to "KW S" Hi All My understanding of ping is that it uses icmp however, a frend of mine told me that in a ping flood test,ping uses udp because there is no need for acknowledgment My understanding is icmp falls under the internetwork layer in DOD model and so when a ping command is executed,instead of using UDP,IP will use arp to find the hardware address of the gateway (if the destination host is on another network) so who is right ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66844&t=66827 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]