Definition

anti-replay protocol

The anti-replay protocol is part of the Internet Engineering Task Force (IETF) Internet Protocol Security (IPSec) standard. Anti-replay ensures IP packet-level security by making it impossible for a hacker to intercept message packets and insert changed packets into the data stream between a source computer and a destination computer. By detecting packets that match the sequence numbers of those that have already arrived, the anti-replay mechanism helps to ensure that invalid packets are discarded. Both of the main protocols in the IPSec standard, the Encapsulating Security Payload (ESP) and the Authentication Header (AH), use anti-replay protection.

The anti-replay mechanism works by keeping track of the sequence numbers in packets as they arrive. Whether the mechanism is used at the receiving end depends upon a security level setting set by the receiver. When a security association has been established between a sender and a receiver, their counters are initialized at zero. The first packet sent will have a sequence number of 1, the second 2, and so on. Each time a packet is sent, the receiver verifies that the number is not that of a previously sent packet. When detection of a replayed packet occurs, the program sends an error message, discards the replayed packet, and logs the event - including in the log entry identifiers such as the date/time received, source address, destination address, and the sequence number.

This was last updated in September 2005
Posted by: Margaret Rouse

Email Alerts

Register now to receive SearchNetworking.com-related news, tips and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

More News and Tutorials

Do you have something to add to this definition? Let us know.

Send your comments to techterms@whatis.com

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: