A Christmas tree packet is a
packet with every single option set for whatever protocol is in use. Also known as a "Kamikaze" packet, nastygram, and lamp test segment. The term derives from a fanciful image of each little option bit being represented by a different-colored light bulb, all turned on, as in, "the packet was lit up like a
Christmas tree." When used for scanning, the flags set for Christmas tree packets are FIN, URG and PSH.Christmas tree packets can be used as a method of divining the underlying nature of a
TCP/IP stack by sending the packets and awaiting and analyzing the responses. Many operating systems implement their compliance with the
Internet Protocol standard (RFC 791) in varying or incomplete ways. By observing how a host responds to an odd packet, such as a Christmas tree packet, assumptions can be made regarding the host's operating system. Versions of
Microsoft Windows,
BSD/OS,
HP-UX,
Cisco IOS,
MVS, and
IRIX display behaviors that differ from the
RFC standard when queried with said packets.
See more at Wikipedia.org...
<
networking> (Or kamikaze packet) A
packet with every single option set for whatever
protocol is in use. The term doubtless derives from a fanciful image of each little option bit being represented by a different-coloured light bulb, all turned on.
RFC 1025, "TCP and IP Bake Off" says:
10 points for correctly being able to process a "Kamikaze" packet (AKA
nastygram, Christmas tree packet, lamp test segment, et al.). That is, correctly handle a segment with the maximum combination of features at once (e.g. a SYN URG PUSH FIN segment with options and data).
Compare:
Chernobyl packet.
[
Jargon File]
(1994-11-09)