[lkml]   [2001]   [Oct]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectOther computers HIGHLY degrading network performance (DoS?)

    This is not a direct kernel issse. However, it is a serious threat for the
    network performance of our Linux boxes, therefore I thought of posting it here.

    There is a popular software that runs on MS platform called "download
    accelerator". This opens several threads for a download job (each one
    downloading a portion of the file), sometimes even using mirror sites.
    However, it not only grabs whole bandwidth, but makes it hard for other
    machines to even ping each other the return time being around 5-10 seconds on a
    100 Mbps network! The download process is getting only 64 kbps from the
    Internet. Internet access is virtually impossible for the other machines.

    This program can run with a `normal download' mode and this doesn't cause a
    big problem.

    I monitored network traffic with tcpdump, and noticed that those packets don't
    have tcp timestamps and tcp sack. I turned them off on my Linux box using
    sysctl, and also tried turning on ECN without success.

    This is of course a DoS in disguise, and is there a way to stop it?

    I am thinking of setting up a firewall with netfilter and transparent proxy as
    a workaround.

    Thanks in advance.




    Debian GNU/Linux (kernel 2.4.13)

    History books which contain no lies are extremely dull.

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:11    [W:3.062 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site