icmp ！！！

Question

这是在代理是上#tcpdump -i eth0 -n   看到的：
6:11:33.253383 61.150.76.13 > 61.153.180.181: icmp (frag 15806:1480@1480+)
06:11:33.253388 61.150.76.13 > 61.153.180.181: icmp (frag 15806:1136@2960)
06:11:33.253396 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.253793 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15807:1480@0+)
06:11:33.253800 61.150.76.13 > 61.153.180.181: icmp (frag 15807:1480@1480+)
06:11:33.253804 61.150.76.13 > 61.153.180.181: icmp (frag 15807:1136@2960)
06:11:33.254221 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15808:1480@0+)
06:11:33.254227 61.150.76.13 > 61.153.180.181: icmp (frag 15808:1480@1480+)
06:11:33.254644 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15809:1480@0+)
06:11:33.254651 61.150.76.13 > 61.153.180.181: icmp (frag 15809:1480@1480+)
06:11:33.255114 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15810:1480@0+)
06:11:33.255291 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.255519 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15811:1480@0+)
06:11:33.255537 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.255937 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15812:1480@0+)
06:11:33.255943 61.150.76.13 > 61.153.180.181: icmp (frag 15812:1480@1480+)
06:11:33.256362 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15813:1480@0+)
06:11:33.256367 61.150.76.13 > 61.153.180.181: icmp (frag 15813:1480@1480+)
06:11:33.256807 61.150.76.13 > 61.153.180.181: icmp (frag 15814:1136@2960)
06:11:33.257026 219.148.140.236.15440 > 61.150.76.13.3076: udp 960
06:11:33.257241 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15815:1480@0+)
06:11:33.257431 61.150.76.13.3076 > 219.148.140.236.15440: udp 29
06:11:33.257653 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15816:1480@0+)
06:11:33.257658 61.150.76.13 > 61.153.180.181: icmp (frag 15816:1480@1480+)
06:11:33.257781 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.258080 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15817:1480@0+)
06:11:33.258162 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.258602 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15818:1480@0+)
06:11:33.259376 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15819:1480@0+)
06:11:33.259381 61.150.76.13 > 61.153.180.181: icmp (frag 15819:1480@1480+)
06:11:33.259385 61.150.76.13 > 61.153.180.181: icmp (frag 15819:1136@2960)
06:11:33.259798 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15820:1480@0+)
06:11:33.260285 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15821:1480@0+)
06:11:33.260264 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.260590 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.260687 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15822:1480@0+)
06:11:33.261089 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15823:1480@0+)
06:11:33.261151 61.150.76.13.12215 > 124.114.11.21.45370: udp 38
06:11:33.261297 61.150.76.13.12215 > 124.114.11.21.45370: udp 38
06:11:33.261556 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15824:1480@0+)
06:11:33.261962 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15825:1480@0+)
06:11:33.261967 61.150.76.13 > 61.153.180.181: icmp (frag 15825:1480@1480+)
06:11:33.262384 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15826:1480@0+)
06:11:33.262701 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.262835 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.263673 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15829:1480@0+)
06:11:33.263679 61.150.76.13 > 61.153.180.181: icmp (frag 15829:1480@1480+)
06:11:33.264113 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15830:1480@0+)
06:11:33.264563 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15831:1480@0+)
06:11:33.264569 61.150.76.13 > 61.153.180.181: icmp (frag 15831:1480@1480+)
06:11:33.264993 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15832:1480@0+)
06:11:33.265419 61.150.76.13.1724 > 60.191.255.118.http: . ack 7240 win 63878 <nop,nop,timestamp 407738 14374443,nop,nop,sack sack 1 {8688:11584} > (DF)
06:11:33.265500 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.265819 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15834:1480@0+)
06:11:33.265872 61.150.76.13.1657 > 222.76.218.151.http: . ack 17376 win 64240 <nop,nop,timestamp 407738 3046923> (DF)
06:11:33.266159 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.266675 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15836:1480@0+)
06:11:33.266681 61.150.76.13 > 61.153.180.181: icmp (frag 15836:1480@1480+)
06:11:33.267142 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15837:1480@0+)
06:11:33.267148 61.150.76.13 > 61.153.180.181: icmp (frag 15837:1480@1480+)
06:11:33.267398 222.76.218.151.http > 61.150.76.13.1711: . 27512:28960(144 ack 1 win 65273 <nop,nop,timestamp 3046923 407738> (DF)
06:11:33.267905 58.60.223.207.24626 > 61.150.76.13.3076: udp 36
06:11:33.267963 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15839:1480@0+)
06:11:33.268174 61.150.76.13.1711 > 222.76.218.151.http: . ack 28960 win 64240 <nop,nop,timestamp 407738 3046923> (DF)
06:11:33.268180 61.150.76.13.3076 > 58.60.223.207.24626: udp 29
06:11:33.268426 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15840:1480@0+)
06:11:33.268431 61.150.76.13 > 61.153.180.181: icmp (frag 15840:1480@1480+)
06:11:33.268861 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15841:1480@0+)
06:11:33.269282 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15842:1480@0+)
06:11:33.269711 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15843:1480@0+)
06:11:33.269718 61.150.76.13 > 61.153.180.181: icmp (frag 15843:1480@1480+)
06:11:33.270032 58.60.223.207.24626 > 61.150.76.13.3076: udp 35
06:11:33.270150 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15844:1480@0+)
06:11:33.270160 61.150.76.13 > 61.153.180.181: icmp (frag 15844:1136@2960)
06:11:33.270551 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15845:1480@0+)
06:11:33.271027 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15846:1480@0+)
06:11:33.271424 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15847:1480@0+)
06:11:33.271841 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15848:1480@0+)
06:11:33.271847 61.150.76.13 > 61.153.180.181: icmp (frag 15848:1480@1480+)
06:11:33.271850 61.150.76.13 > 61.153.180.181: icmp (frag 15848:1136@2960)
06:11:33.272305 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15849:1480@0+)
06:11:33.272948 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15850:1480@0+)
06:11:33.272955 61.150.76.13 > 61.153.180.181: icmp (frag 15850:1480@1480+)
06:11:33.272958 61.150.76.13 > 61.153.180.181: icmp (frag 15850:1136@2960)
06:11:33.273568 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15851:1480@0+)
06:11:33.273588 61.150.76.13 > 61.153.180.181: icmp (frag 15851:1480@1480+)
06:11:33.273592 61.150.76.13 > 61.153.180.181: icmp (frag 15851:1136@2960)
06:11:33.274026 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15852:1480@0+)
06:11:33.274033 61.150.76.13 > 61.153.180.181: icmp (frag 15852:1480@1480+)
06:11:33.274283 58.213.74.173.11426 > 61.150.76.13.12215: udp 29
06:11:33.274454 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15853:1480@0+)
06:11:33.275288 61.150.76.13 > 61.153.180.181: icmp: echo request (frag 15855:1480@0+)
06:11:33.

Answer 1

请问高手我改怎么做呀。。。。

Answer 2

你要做什么别人都不知道，谁知道你要怎么做？

Answer 3

不用做什么吧，人家那儿MTU大，ping出来的大包传到你这儿时被拆分了，或者说他是有意弄点碎片打你。
光这些ip碎片打你Linux死不了，让他去。
实在不想被打的话么换IP，或者改DNS A记录（哈哈）。
如果实在要做点保护的话：iptables -A INPUT -f -j DROP（好像是这么丢碎片的），不过你好像本身就没去回它的包。。。