Re: New tcp stack attack

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: <misc@...>
Date: Wednesday, October 1, 2008 - 10:44 am

Duncan Patton a Campbell wrote:

SYN cookies are only mentioned to boast about their high-performance tcp
flooder. Problem is that some systems 'became overly responsive', and
this is clearly an implementation issue.

"We noticed that certain systems would start resending certain packet
responses continuously until they were rebooted," Lee said.

Certain (buggy) systems resend certain (invalid/unneeded) responses, lo
and behold: tcp is broken forever. Phew.

--

./lxnt

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
New tcp stack attack, Leon Dippenaar, (Wed Oct 1, 8:52 am)
Re: New tcp stack attack, Jussi Peltola, (Wed Oct 1, 11:56 am)
Re: New tcp stack attack, Duncan Patton a Campbell, (Wed Oct 1, 10:13 am)
Re: New tcp stack attack, Fernando Gont, (Wed Oct 1, 11:24 am)
Re: New tcp stack attack, Duncan Patton a Campbell, (Wed Oct 1, 11:41 am)
Re: New tcp stack attack, Fernando Gont, (Wed Oct 1, 12:26 pm)
Re: New tcp stack attack, Peter J. Philipp, (Wed Oct 1, 12:56 pm)
Re: New tcp stack attack, Sunnz, (Fri Oct 3, 12:18 pm)
Re: New tcp stack attack, Fernando Gont, (Wed Oct 1, 1:31 pm)
Re: New tcp stack attack, Peter J. Philipp, (Wed Oct 1, 2:11 pm)
Re: New tcp stack attack, Brian Keefer, (Wed Oct 1, 10:37 pm)
Re: New tcp stack attack, Stephan A. Rickauer, (Wed Oct 1, 9:31 am)
Re: New tcp stack attack, Claudio Jeker, (Wed Oct 1, 9:58 am)
Re: New tcp stack attack, Paul de Weerd, (Wed Oct 1, 10:46 am)
Re: New tcp stack attack, Duncan Patton a Campbell, (Wed Oct 1, 10:22 am)
Re: New tcp stack attack, Dries Schellekens, (Wed Oct 1, 10:47 am)
Re: New tcp stack attack, Dries Schellekens, (Wed Oct 8, 7:12 am)
Re: New tcp stack attack, Alexander Sabourenkov, (Wed Oct 1, 10:44 am)