[lkml]   [1999]   [Sep]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] Re: predictable IP ID

    > - IDs for raw ip packets;

    It is easy to solve. F.e. look at softnet patch at ip-routing.

    > - possible DoS attacks by filling the cache and blocking new node creation
    > (thus blocking communications with new legal peers).
    > The #2 is a problem hard to avoid in this model.

    You know my opinion on all this craft. From other hand time-wait socket
    present exactly the same problem.

    + /* XXX: Does any SMP serialisation for IP transmission exist? --SAW */

    No. It was bug both in 2.2 and in 2.3.

    + * Such an implementation has been chosen not just for fun. It's a way to
    + * prevent easy and efficient DoS attacks by creating hash collisions. A huge
    + * amount of long living nodes in a single hash slot would significantly delay
    + * lookups performed with disabled BHs.

    Though you managed to prove me that all this issue is not paranoia.

    This bullet is yet. The easiest and the most efficient attack
    is to congest your peer cache and to kill all the IP then.
    As I see AVL just increases size of entry twice, so that you made
    it twice worse rather than better.

    Please, think about removing it. 8)8)


    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:54    [W:0.018 / U:0.432 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site