Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 May 2001 09:20:35 +0700
From:      John Indra <john@office.naver.co.id>
To:        freebsd-questions@freebsd.org
Cc:        freebsd-current@freebsd.org
Subject:   My network is dead because of this program :(
Message-ID:  <20010516092035.A79109@office.naver.co.id>

next in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Dear all...

First of all, really sorry for cross-posting...

I am running a -CURRENT system (Apr 30th 2001). There is a user in my
machine running this small program to DoS my xl0 interface. I doubt that
this program is specifically designed for xl cards though.

Once the program is started, it starts forking childs I assume. Then after
sometime, this messages start popping to my screen:

xl0: no memory for rx lists -- packet dropped

After going to single user mode, cause I can't kill the offending program
once it is running in multiuser mode (even kill -9 won't work on my system),
then coming back to multiuser mode, I tried to run it and trace what it does
with truss. But, truss didn't seem to output anything at all. Then, I saw
the program state in top and it said the program is in mbuf state.

I have searched all mailing lists archieves in
http://www.freebsd.org/search/search.html#mailinglists but wierdly, there
are no articles shown when I enter this as a query: "no memory for rx list"

Can anyone help me trace what the program does? And how can I prevent the
program to DoS my network interface? Even when the program is started by
unprivileged user, it works, it DoS my network interface. Is this a bug?

I have attached the offending program with this mail. Please don't run it on
production system! You have been warned!

Thank you very much...

/john
Live Free OR Die


[-- Attachment #2 --]
ELF	FreeBSD4
4 (444LLLpp/usr/libexec/ld-elf.so.1FreeBSD2	

,L d&,Ԙ4 ؘLWbg
mЄntؘd libc.so.5pause_DYNAMICsleep_initwriteenviron__deregister_frame_infosetsockopt__prognamefork_finiatexitsocketpair_GLOBAL_OFFSET_TABLE_exitfcntl__register_frame_info_etext_edata__bss_start_endend(,04
8<@DHN5 %$%(h%,h%0h%4h%8h %<h(%@h0%Dh8p%Hh@`UWVSҍu^|=Ԙ~)}t#E8t8/u	H
@8uLtRfhVWVSP]UE]ÍvUE]ÍvUE]ÐU=u@v@С8ut
hy]ÐU]ÉUthhy]ÍvU]ÐU Ev}~CtvEvjvEPjjj)uE jEPhhEP jEPhhEP jEPhhEP jEPhhEPh jjEPjjEPh PEPh PEP1vÐUS=tvЃ;u[]ÍvU]ÐLƄքd
(@Ё
H[ASM_FILE_END]GCC: (c) 2.95.3 20010315 (release)[ASM_FILE_END]GCC: (c) 2.95.3 20010315 (release)[ASM_FILE_END]GCC: (c) 2.95.3 20010315 (release)[ASM_FILE_END]GCC: (c) 2.95.3 20010315 (release)01.0101.0101.0101.01.symtab.strtab.shstrtab.interp.note.ABI-tag.hash.dynsym.dynstr.rel.plt.init.plt.text.fini.rodata.data.eh_frame.ctors.dtors.got.dynamic.bss.comment.note#1((7Ёp?@@G	HPddVpp[agou0LLp	P	Dp/	(Ё@dp	

Lȅ	-9ȅ	O
b	mw(	P				
\	,LdԘ 4ؘ8CN	UZf\^	k
qЄnxؘd crtstuff.cgcc2_compiled.p.3__DTOR_LIST__completed.4__do_global_dtors_aux__EH_FRAME_BEGIN__fini_dummyobject.11frame_dummyinit_dummyforce_to_data__CTOR_LIST____do_global_ctors_aux__CTOR_END____DTOR_END____FRAME_END__x.cpause_DYNAMIC_etextsleep_initwriteenviron__deregister_frame_infoendsetsockopt__progname_startfork__bss_startmain_finiatexitsocketpair_edata_GLOBAL_OFFSET_TABLE__endexitfcntl__register_frame_info

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010516092035.A79109>