Re: Patch to reduce use of global IP ID value(s) to avoid leaking information

2015-04-03 Thread Hans Petter Selasky
On 04/03/15 23:36, Gleb Smirnoff wrote: If you don't agree with me, let's ask opinion of Mike Silbersack, the author of the random IP ID code. What does he things on manual page diff? Hi Gleb, Feel free to modify or update that text. Sure we could ask Mike Silbersack for advice about this one

Re: Patch to reduce use of global IP ID value(s) to avoid leaking information

2015-04-03 Thread Gleb Smirnoff
Hans, On Fri, Apr 03, 2015 at 11:16:58PM +0200, Hans Petter Selasky wrote: H> > What the hell? At Fri, 3 Apr 2015 15:41:21 +0300 (MSK) you ask: H> H> An expression like that requires a good answer. I've pulled together H> some parts and pieces from some existing code to make a test applicatio

Patch to reduce use of global IP ID value(s) to avoid leaking information

2015-04-03 Thread Hans Petter Selasky
Hi, Moving this discussion away from the committers list, like requested by Gorge N. On 04/03/15 17:14, Gleb Smirnoff wrote:>Hans, > > What the hell? At Fri, 3 Apr 2015 15:41:21 +0300 (MSK) you ask: An expression like that requires a good answer. I've pulled together some parts and piece

Re: Full 32bit flowid from igb(4)

2015-04-03 Thread Adrian Chadd
On 3 April 2015 at 10:02, hiren panchasara wrote: > On 04/03/15 at 10:00P, Adrian Chadd wrote: >> On 3 April 2015 at 09:54, hiren panchasara >> wrote: >> > On 03/31/15 at 11:15P, Adrian Chadd wrote: >> >> Yeah, I think the right thing to do is: >> >> >> >> * If the descriptor says it's RSS, then

Re: Full 32bit flowid from igb(4)

2015-04-03 Thread hiren panchasara
On 04/03/15 at 10:00P, Adrian Chadd wrote: > On 3 April 2015 at 09:54, hiren panchasara wrote: > > On 03/31/15 at 11:15P, Adrian Chadd wrote: > >> Yeah, I think the right thing to do is: > >> > >> * If the descriptor says it's RSS, then use the flowid + rss type > > So, if we have multiqueue, we d

Re: Full 32bit flowid from igb(4)

2015-04-03 Thread Adrian Chadd
On 3 April 2015 at 09:54, hiren panchasara wrote: > On 03/31/15 at 11:15P, Adrian Chadd wrote: >> Yeah, I think the right thing to do is: >> >> * If the descriptor says it's RSS, then use the flowid + rss type > So, if we have multiqueue, we do everything needed to get RSS > flowid/type. That mean

Re: Full 32bit flowid from igb(4)

2015-04-03 Thread hiren panchasara
On 03/31/15 at 11:15P, Adrian Chadd wrote: > Yeah, I think the right thing to do is: > > * If the descriptor says it's RSS, then use the flowid + rss type So, if we have multiqueue, we do everything needed to get RSS flowid/type. That means, with num_queues > 1 we can just expose those. > * else,

Re: Programmatically Creating VLAN in the Kernel

2015-04-03 Thread Gleb Smirnoff
On Mon, Mar 30, 2015 at 09:49:56AM -0400, Juan Mojica wrote: J> I'm trying to programmatically create a VLAN in the kernel via ifioctl, but J> I'm hitting a "copyin" in the ioctl path, and since the address I'm passing J> in is a kernel address and not a user space address, the copyin is failing. J

Re: ng_netgraph and BGP

2015-04-03 Thread Gleb Smirnoff
On Wed, Apr 01, 2015 at 11:50:48AM +0100, William Waites wrote: W> I run a small network composed of even smaller networks each W> encapsulated in an autonomous system. I'd like to do traffic W> accounting using netflow aggregated by ASN. My border routers run W> FreeBSD and BIRD. W> W> Right now,

Re: opaque ifnet progress

2015-04-03 Thread Gleb Smirnoff
Anuranjan, On Fri, Apr 03, 2015 at 01:42:49AM +, Anuranjan Shukla wrote: A> Hello Gleb, A> Thanks for sharing the details. A> From looking at the wiki page it's not exactly clear what your plan is A> regarding the accessor functions as they stand today (if_get*/if_set* A> after drvapi change

Re: [oss-security] CVE Request : IPv6 Hop limit lowering via RA messages

2015-04-03 Thread Loganaden Velvindron
On Fri, Apr 3, 2015 at 1:54 PM, D.S. Ljungmark wrote: > On Fri, Apr 3, 2015 at 6:06 AM, Jim Thompson wrote: >> have you considered that there might not be a relevant patch because >> FreeBSD’s implementation isn’t affected? > > sys/netinet6/nd6_rtr.c > > 300 if (nd_ra->nd_ra_curhopli

Re: [oss-security] CVE Request : IPv6 Hop limit lowering via RA messages

2015-04-03 Thread D.S. Ljungmark
On Fri, Apr 3, 2015 at 6:06 AM, Jim Thompson wrote: > have you considered that there might not be a relevant patch because > FreeBSD’s implementation isn’t affected? sys/netinet6/nd6_rtr.c 300 if (nd_ra->nd_ra_curhoplimit) 301 ndi->chlim = nd_ra->nd_ra_curhoplimi

Re: tap(4): will it be more reasonable if it preserved UP/DOWN state, when closed?

2015-04-03 Thread Yuri
On 04/01/2015 15:58, Yuri wrote: I am going to create the corresponding net.link.tap.down_on_close. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199136 ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ne