bugtraq - Re: Revised paper on "ICMP attacks against TCP"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4323295C.9080602@mr0vka.eu.org>
Date: Sat, 10 Sep 2005 20:43:40 +0200
From: Łukasz Bromirski <lbromirski@...vka.eu.org>
To: Florian Weimer <fw@...eb.enyo.de>
Cc: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: Re: Revised paper on "ICMP attacks against TCP"

Florian Weimer wrote:

>>IIRC, those Cisco products that are not vulnerable to the PMTU just don't 
>>implement PMTUD, right?
> You can explicitly enable PMTUD if you want ("ip tcp
> path-mtu-discovery").  It's recommended to reduce CPU overhead for
> processing BGP message (no kidding, apparently it id make a difference
> in the past).

It's still making a difference and not only on Cisco products. When
You have MTU sized down to 576 it's quite harder to push full BGP
table fast. When MTU is 1500, or something around that, you're just
synchronizing faster, because You may pack more information in one
packet.

There's a bunch of presentations freely available that show performance
of BGP sessions with various network-level tweaks.

-- 
this space was intentionally left blank    |            Łukasz Bromirski
you can insert your favourite quote here   |        lukasz:bromirski,net
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/