netdev - Re: rfc5837 and rfc8335

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Sun, 21 Mar 2021 18:50:06 -0700
From:   Ishaan Gandhi <ishaangandhi@...il.com>
To:     David Ahern <dsahern@...il.com>, Ron Bonica <rbonica@...iper.net>
Cc:     Andreas Roeseler <andreas.a.roeseler@...il.com>,
        David Miller <davem@...emloft.net>,
        Network Development <netdev@...r.kernel.org>,
        Stephen Hemminger <stephen@...workplumber.org>,
        Willem de Bruijn <willemdebruijn.kernel@...il.com>,
        junipeross20@...hmc.edu
Subject: Re: rfc5837 and rfc8335

> What is the motivation for adding support for these RFCs? Is the push
> from a company or academia (e.g., a CS project)?

Yes, these patches (RFC 8335 and 5837) were produced as a result of a
collaboration between Juniper Networks and Harvey Mudd College.

Let me loop in our advisor, Zach Dodds, and Juniper Networks engineer
Ron Bonica. I believe Ron has more context on the potential usage and
existing support for these two features.

> On Mar 20, 2021, at 1:35 PM, David Ahern <dsahern@...il.com> wrote:
> 
> On 3/19/21 10:24 PM, David Ahern wrote:
>> At the end of the day, what is the value of this feature vs the other
>> ICMP probing set?
> 
> Merging the conversations about both of these RFCs since my comments and
> questions are the same for both.
> 
> What is the motivation for adding support for these RFCs? Is the push
> from a company or academia (e.g., a CS project)?
> 
> Realistically, who is expected to use this feature and why given the
> information it leaks about the networking configuration of the node. Why
> is this tool expected to be more useful than a network operator using
> existing protocols like lldp, collecting that data across nodes and
> analyzing, or using tools like suzieq[1]?
> 
> RFC 5837 has been out for 11 years. Do any operating systems support it
> — e.g., networking vendors like Cisco, Juniper, etc.? If not, why not?
> This one seems to me the most dubious at this point in time.
> 
> Similarly for RFC 8335, what is the current support for it?
> 
> Linux does not need to support an RFC just because it exists. I am
> really questioning the value of both of them
> 
> [1] https://github.com/netenglabs/suzieq