From: "Geo" 

"John Beckett"  wrote
in message news:421c3f34.2631664{at}216.144.1.254...

> Over here, there were thousands more pings arriving per hour than SQL UDP
> packets. That probably explains the difference you saw.

Nope, we had customer box on 100Mb ethernet get hit by slammer, the pinging
worm was mostly dialup customers and didn't even show up in the bandwidth
usage charts. Slammer maxed them.

> There really is no difference between ICMP and UDP as far as the need to
> do an ARP is concerned.

I believe you for how you have described it but I still remember something
about arp and icmp timeout vs unreachable responses or something like that.
I'll refresh my memory when I've got time to read up on icmp again, for now
I'll just assume I'm remembering wrong.

Geo.

--- BBBS/NT v4.01 Flag-5