Date: Fri, 6 May 2005 18:56:01 -0500 (CDT) From: Mike Silbersack <silby@silby.com> To: gandalf@digital.net Cc: freebsd-net@freebsd.org Subject: Re: FreeBSD and the Rose Attack / NewDawn Message-ID: <20050506185301.B6374@odysseus.silby.com> In-Reply-To: <32528526.1115049523374.JavaMail.root@wamui08.slb.atl.earthlink.net> References: <32528526.1115049523374.JavaMail.root@wamui08.slb.atl.earthlink.net>
next in thread | previous in thread | raw e-mail | index | archive | help
I'll take a look at it while I'm at BSDCan next week. From your website's description of the attack, I don't see why FreeBSD would be affected so greatly... we must be wasting a lot of time traversing linked lists / etc. Mike "Silby" Silbersack On Mon, 2 May 2005 gandalf@digital.net wrote: > Greetings and Salutations: > > I *just* got my FreeBSD setup stable and working witha KDE GUI. :-). I know, easy for you guys but this is the first time I have set up FreeBSD with automatic updates. I settled on FreeBSD 5.4 after many tries. > > I tried the Rose Attack / NewDawn against my laptop (it is a slow Pentium II 400 MHz Dell Inspiron 7000): > http://digital.net/~gandalf/Rose_Frag_Attack_Explained.htm > > Specifically: > ./NewDawn4 1 <IP Address> 0 5 9999 99999999 4000 2 > > My machine locked up at pretty close to 100% when viewing the top command. > > I asked a fellow worker who had a PIII 733 MHz to take a look and he reported about 70% CPU increase. > > FYI. You might wish to take a look into this, IMHO this is a decent CPU DOS. > > Ken > > ------------------------------------------------------------------ > Do not meddle in the affairs of wizards for they are subtle and > quick to anger. > Ken Hollis - Gandalf The White - gandalf@digital.net - O- TINLC > WWW Page - http://gandalf.home.digital.net/ > Trace E-Mail forgery - http://gandalf.home.digital.net/spamfaq.html > Trolls crossposts - http://gandalf.home.digital.net/trollfaq.html > > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050506185301.B6374>