Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Mar 1998 16:03:27 -0600 (CST)
From:      toasty@dragondata.com
To:        FreeBSD-gnats-submit@FreeBSD.ORG
Subject:   kern/6059: Packets from 1.1.1.1 can crash 2.2 server
Message-ID:  <199803182203.QAA27635@home.dragondata.com>

next in thread | raw e-mail | index | archive | help

>Number:         6059
>Category:       kern
>Synopsis:       Packets from 1.1.1.1 can crash 2.2 server
>Confidential:   yes
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Mar 18 14:10:02 PST 1998
>Last-Modified:
>Originator:     Kevin Day
>Organization:
DragonData
>Release:        FreeBSD 2.2.5-STABLE i386
>Environment:

2.2 server

>Description:

NOTE: This hasn't been well tested, if this is the result of operator error,
I apologize, but I can't afford to keep crashing my server to test it. :)

Flood a server with packets from a 1.1.1.1. 

Mar 18 02:02:17 toast /kernel.GENERIC: arpresolve: can't allocate llinfo for 1.1.1.1
Mar 18 02:02:38 toast last message repeated 6 times
Mar 18 02:03:31 toast last message repeated 3 times
Mar 18 02:10:02 toast last message repeated 10 times
Mar 18 02:23:02 toast last message repeated 20 times
Mar 18 02:34:55 toast last message repeated 15 times
Mar 18 02:42:32 toast last message repeated 15 times
Mar 18 02:49:02 toast last message repeated 10 times
Mar 18 03:00:32 toast last message repeated 10 times
Mar 18 03:13:32 toast last message repeated 20 times

After an hour or so of doing this, the server suggests more swap space, then
locks up.


>How-To-Repeat:

Spoof 1.1.1.1, and open lots of tcp connections.

>Fix:
	
No idea. :)
>Audit-Trail:
>Unformatted:
Kevin Day

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199803182203.QAA27635>