-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 8/6/2012 4:15 PM, Claudio Jeker wrote: > On Mon, Aug 06, 2012 at 10:34:22PM +0200, Laurent CARON wrote: >> Hi, >> >> I'm hit by a rather nasty OpenBGPd 'bug' causing sessions to >> flap (basically go down/up/...). >> >> One of the prefixes is: 81.169.0.0/17 >> >> Description of bug >> https://puck.nether.net/pipermail/juniper-nsp/2012-July/023774.html >> >> >> Is the included fix >> (((s & 0xf0) & ~(ATTR_EXTLEN | (m))) == (t)) instead of just >> (((s) & ~(ATTR_EXTLEN | (m))) == (t)) >> >> sufficient ? >> > > I would prefer something like this. Since then we ensure that we do > not forward crap (as in we regard the RFC and send nothing with > reserved bits set). AFAIK there is nothing out there that started > to use the reserved bits so I'm curious how that happend again. > > Only compile tested for now. >
I ran across this today after AboveNET upgraded some routers (I would have appreciated a maintenance notice...) I applied Claudio's patch and the sessions came back up and have been stable for the last half hour. I'll check back in if there are any issues. We have both IPv4 and IPv6 sessions with them, and the IPv6 sessions were unaffected (for what it's worth.) This patch is running on two of our routers. Thank you, - -- James Shupe Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBAgAGBQJQtwhLAAoJECPibMsISQ9adq0QANQIPOXa7yqyDhRs4poH2Tis AlPZBhRTPHtn54rCVKRMcqGJk/xy0bGHSiwgsZMXj29lxrkFPKG312SXT9VgSMnC XqKfV0c9NDA9NDD57K7z0bFUvmO0MKr6S4v5/jZTDddikpDjcuGzFTdLpbE+8DfN 4VAXEUu/Ug8h6ZuR9TNYSkup78dQP9W7han+cBsW5PNqa40CM3T944D/QiZiTuP2 kpmEWPyALWzQMldPXaVTLoSyaI3ijxu6tC9iEXMKtQ/IEuF5z/xBHtwj7Vkmc/La lkL5muRv862eSONdVPvCf4atbUivSTvV3ZjYyOCldzQiVQlZPUf9XdkfAx8FxIrR ycMMDMCJC0IYtGdjnkJtEP4fgvjGY4/Uxzw2PaYRY6QxWJ09v2mLOfEeA70uZNFy L2+cBouR3l/8fMPfRwTdqR65JEfkke5TRwtsBi6wWsMla7gK3/2Z4vHLp0LdD5Pu sIWirQqoE9tCiDzFLyn49Xpfk+M42kJu3cXiDGvdDep3taE/zSHBbCiimgVMPxK7 9eO6o14W9yZxL0C/NTV2f7z1k3wJCG4tvcGznuw5M5K0LdpW89Wy7uBQ1KZstU3p PlnqVBhBbpcrO+/rOSPiV/AuGMJPfKNnrJSF6Bncdu4dA2i3xWE3taa9JQ7A3JqA 0CojuAbNFQml66wsTJv4 =/Xzi -----END PGP SIGNATURE-----
