From: "David S. Miller" <davem@redhat.com>
To: Pekka Savola <pekkas@netcore.fi>
Cc: timg@tpi.com, anton@samba.org, netdev@oss.sgi.com,
linux-net@vger.kernel.org
Subject: Re: [PATCH} ARP auto-sizing for 2.4.24 - 2.4.26-pre3
Date: Mon, 15 Mar 2004 13:57:53 -0800 [thread overview]
Message-ID: <20040315135753.28b945fa.davem@redhat.com> (raw)
In-Reply-To: <Pine.LNX.4.44.0403152350260.6903-100000@netcore.fi>
On Mon, 15 Mar 2004 23:55:04 +0200 (EET)
Pekka Savola <pekkas@netcore.fi> wrote:
> Isn't there a problem when an outside attacker brute-force pings every
> IP address in some order? The intent here is to overload the router
> to do a lot of ARP/ND requests which result to nothing.
Since another request for the same IP won't spam out another ARP
request whilst we have an existing entry in state "resolve in progress",
the damage is quite limited I'd say.
Sounds to me like the backlog of packets we keep around for each
"resolve in progress" neighbour cache entry is more interesting
for DoS purposes :-)
next prev parent reply other threads:[~2004-03-15 21:57 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-03-14 19:10 [PATCH} ARP auto-sizing for 2.4.24 - 2.4.26-pre3 Tim Gardner
2004-03-15 21:44 ` David S. Miller
2004-03-15 21:55 ` Pekka Savola
2004-03-15 21:57 ` David S. Miller [this message]
2004-03-15 22:21 ` Pekka Savola
2004-03-15 22:00 ` Andi Kleen
2004-03-16 16:05 ` Tim Gardner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040315135753.28b945fa.davem@redhat.com \
--to=davem@redhat.com \
--cc=anton@samba.org \
--cc=linux-net@vger.kernel.org \
--cc=netdev@oss.sgi.com \
--cc=pekkas@netcore.fi \
--cc=timg@tpi.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).