Re: m_reclaim and a protocol drain

2001-12-30 Thread Mike Silbersack
On Sun, 30 Dec 2001, Randall Stewart wrote: > > Heh, you nailed the reverse of the problem we've seen: Right now the easy > > way to cause exhaustion is to fill up _send_ buffers, via netkill. I > > guess if we solve that problem, out of order segments could be used for an > > attack too. > >

Re: m_reclaim and a protocol drain

2001-12-30 Thread Randall Stewart
Mike Silbersack wrote: > > On Wed, 26 Dec 2001, Randall Stewart wrote: > > > This comment facinates me. The reason we made SACK's in SCTP > > revokeable is due to the potential DOS attack that someone > > can supposedly lauch if you don't allow the stack to revoke. > > > > I can actually see the

Re: m_reclaim and a protocol drain

2001-12-29 Thread Mike Silbersack
On Wed, 26 Dec 2001, Randall Stewart wrote: > This comment facinates me. The reason we made SACK's in SCTP > revokeable is due to the potential DOS attack that someone > can supposedly lauch if you don't allow the stack to revoke. > > I can actually see the reason that Sally made the comments >

Re: m_reclaim and a protocol drain

2001-12-26 Thread Bosko Milekic
On Wed, Dec 26, 2001 at 06:13:40AM -0600, Randall Stewart wrote: > > > 1) One of the primary things I thought the drain() functions > > >help with is to ward off DOS attacks. > > > > Well, no, not really. They're just there to `help' out in any > > starvation case, really. > > > > This c

Re: m_reclaim and a protocol drain

2001-12-26 Thread Randall Stewart
Bosko: Sorry for the delayed response... some comments below.. Bosko Milekic wrote: > > On Fri, Dec 21, 2001 at 09:42:30AM -0600, Randall Stewart wrote: > > Hi all: > > > > I have a question. I have been working to test the new > > sctp_drain function I am adding and have had a very difficult

Re: m_reclaim and a protocol drain

2001-12-21 Thread Bosko Milekic
On Fri, Dec 21, 2001 at 09:42:30AM -0600, Randall Stewart wrote: > Hi all: > > I have a question. I have been working to test the new > sctp_drain function I am adding and have had a very difficult > time getting the drain function to be called by the mbuf system... > > Now here is what I most

m_reclaim and a protocol drain

2001-12-21 Thread Randall Stewart
Hi all: I have a question. I have been working to test the new sctp_drain function I am adding and have had a very difficult time getting the drain function to be called by the mbuf system... Now here is what I most observe from some of the test cases I am building: A) All inbound packets get a