Documentation confusion on ICMP Rate Mask/Rate Limiting

[Daryll Swer]

Hi Folks

So I will get straight to the point, I am trying to figure out some answers
on *icmp_ratelimit* and *icmp_ratemask* based on the man page
<https://mailtrack.io/trace/link/1ab83c495d25602c6b2de3095e1a1fa4b795d988?url=https%3A%2F%2Fman7.org%2Flinux%2Fman-pages%2Fman7%2Ficmp.7.html&userId=2153471&signature=34cf95fe977ddeef>
.

The questions are:

   1. How can we determine the Packet per second rate on any given
   rate-limit value (say 10)? Without of course going the hard way of
   benchmarking it by ICMP flooding.
   2. Just what exactly is the *correct mask* in *Binary form* to *include
   all* known ICMP types instead of just the default mask? Been having a
   hard time with this one.
   3. Do we have something of this nature for *IPv6 *in the Kernel? I don't
   see it in most Linux based NetworkOSes as a documented feature.

Default rate-mask below, just can't get it through my head. Maybe we should
also look at revising the documentation wordings for it and possibly make
some changes to the actual code to simplify the bit mapping?

My best guess is that is is the answer to question *2*:
*1111111100100111001*

[image: image.png]

*--*
Best Regards
Daryll Swer
Website: daryllswer.com
<https://mailtrack.io/trace/link/2f87aeb108f5e5520487e1f3abc5bad533b8b292?url=https%3A%2F%2Fwww.daryllswer.com&userId=2153471&signature=c8931df0c4a38427>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20220101/2ace7cd6/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 88132 bytes
Desc: not available
URL: <http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20220101/2ace7cd6/attachment-0001.png>