From owner-freebsd-net@FreeBSD.ORG Fri May 2 11:06:57 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 519E737B401; Fri, 2 May 2003 11:06:57 -0700 (PDT) Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8287843FE0; Fri, 2 May 2003 11:06:56 -0700 (PDT) (envelope-from wollman@khavrinen.lcs.mit.edu) Received: from khavrinen.lcs.mit.edu (localhost [IPv6:::1]) by khavrinen.lcs.mit.edu (8.12.9/8.12.9) with ESMTP id h42I6tVo074334 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 2 May 2003 14:06:55 -0400 (EDT) (envelope-from wollman@khavrinen.lcs.mit.edu) Received: (from wollman@localhost) by khavrinen.lcs.mit.edu (8.12.9/8.12.9/Submit) id h42I6tl4074331; Fri, 2 May 2003 14:06:55 -0400 (EDT) (envelope-from wollman) Date: Fri, 2 May 2003 14:06:55 -0400 (EDT) From: Garrett Wollman Message-Id: <200305021806.h42I6tl4074331@khavrinen.lcs.mit.edu> To: "Crist J. Clark" In-Reply-To: <20030430231712.GC3912@blossom.cjclark.org> References: <200304292247.h3TMlpPU044307@khavrinen.lcs.mit.edu> <20030430231712.GC3912@blossom.cjclark.org> X-Spam-Score: -19.8 () IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,REPLY_WITH_QUOTES X-Scanned-By: MIMEDefang 2.33 (www . roaringpenguin . com / mimedefang) cc: net@FreeBSD.org Subject: Re: Reducing ip_id information leakage X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 May 2003 18:06:57 -0000 < said: > This is actually bad with respect to the spirit of the paper and the > whole idea of information leakage. If I have two FreeBSD machines, one > i386 and one sparc64, they now look different to someone sniffing the > traffic. If I leave the htons(), all of my FreeBSD hosts look > alike. If you have two little-endian machines, one FreeBSD and one some other operating system which doesn't do the htons(), they now look different to someone sniffing the traffic. If you remove the htons(), all of your little-endian hosts look alike. -GAWollman