From owner-freebsd-security Thu Jul 8 8:46:28 1999 Delivered-To: freebsd-security@freebsd.org Received: from puffer.quadrunner.com (puffer.quadrunner.com [205.166.195.4]) by hub.freebsd.org (Postfix) with ESMTP id 2C24D154B6 for ; Thu, 8 Jul 1999 08:46:10 -0700 (PDT) (envelope-from humble@quadrunner.com) Received: from localhost (humble@localhost) by puffer.quadrunner.com (8.9.2/QUAD-2.1) with ESMTP id IAA32744; Thu, 8 Jul 1999 08:46:09 -0700 (PDT) X-Authentication-Warning: puffer.quadrunner.com: humble owned process doing -bs Date: Thu, 8 Jul 1999 08:46:09 -0700 (PDT) From: Richard Steenbergen To: Allen Smith Cc: freebsd-security@freebsd.org Subject: Re: SYN Floods, some food for thought In-Reply-To: <9907080631.ZM6329@beatrice.rutgers.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 8 Jul 1999, Allen Smith wrote: > On Jun 19, 9:19pm, Richard Steenbergen (possibly) wrote: > > > using my flooder and the most optimal techniques I could come up with > > (including asm checksum :P) I was about to generate approx 15kpps (a 4.6x > > I don't suppose you might send this in as a pr for in_cksum.c? Such already exists, as in_cksum.c in the hardware specific junk (such as /usr/src/sys/i386/i386/in_cksum.c). A more useful feature might be a socket which you can bind to a specific interface and then be able to send raw frames (or whatever the data link layer method might be) without the overhead of raw_output, ip_output, routing table lokups, etc. -- Richard Steenbergen humble@EFNet PGP ID: 0x741D0374 PGP Key Fingerprint: C6EF EFA0 83B2 071F 1AB6 B879 1F70 4303 741D 0374 http://users.quadrunner.com/humble To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message