协议分析之UDP旁路阻断

      udp是一种无连接的传输层协议，不像tcp在传输数据前要先发起连接，因此要可以说没有办法阻断udp之间的通讯。有一些资料称可以伪造目的主机发出目的端口不可达的ICMP报文，从而误导源主机中止与目的主机的udp通讯，伪造icmp目的端口不可达的代码如下：

      int ForgedICMP(char *srcIP, char *dstIP, void *forgedData, int count) { char buff[2048] = {0}; char *ptr = buff; ip_header iph; icmp_header icmph; int num = 0; unsigned int isrcip; unsigned int idstip; unsigned short iTotalSize = sizeof(ip_header) + 8 + count; unsigned short iICMPSize = 8 + count; struct sockaddr_in server; if(createSocket()<0) return -1; iph.ip_vhl = (4 << 4) | (sizeof(ip_header) / sizeof(unsigned long)); iph.ip_tos = 0; iph.ip_len = htons(iTotalSize); iph.ip_id = htons(17393); iph.ip_off = 0; iph.ip_ttl = 255; iph.ip_p = IPPROTO_ICMP; iph.ip_sum = 0; isrcip = inet_addr(srcIP); idstip = inet_addr(dstIP); memcpy(&