From owner-freebsd-net@FreeBSD.ORG Fri May 6 23:56:14 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A437016A4D4 for ; Fri, 6 May 2005 23:56:14 +0000 (GMT) Received: from relay01.pair.com (relay01.pair.com [209.68.5.15]) by mx1.FreeBSD.org (Postfix) with SMTP id 1958E43D96 for ; Fri, 6 May 2005 23:56:14 +0000 (GMT) (envelope-from silby@silby.com) Received: (qmail 94239 invoked from network); 6 May 2005 23:56:12 -0000 Received: from unknown (HELO localhost) (unknown) by unknown with SMTP; 6 May 2005 23:56:12 -0000 X-pair-Authenticated: 209.68.2.70 Date: Fri, 6 May 2005 18:56:01 -0500 (CDT) From: Mike Silbersack To: gandalf@digital.net In-Reply-To: <32528526.1115049523374.JavaMail.root@wamui08.slb.atl.earthlink.net> Message-ID: <20050506185301.B6374@odysseus.silby.com> References: <32528526.1115049523374.JavaMail.root@wamui08.slb.atl.earthlink.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed cc: freebsd-net@freebsd.org Subject: Re: FreeBSD and the Rose Attack / NewDawn X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 May 2005 23:56:14 -0000 I'll take a look at it while I'm at BSDCan next week. From your website's description of the attack, I don't see why FreeBSD would be affected so greatly... we must be wasting a lot of time traversing linked lists / etc. Mike "Silby" Silbersack On Mon, 2 May 2005 gandalf@digital.net wrote: > Greetings and Salutations: > > I *just* got my FreeBSD setup stable and working witha KDE GUI. :-). I know, easy for you guys but this is the first time I have set up FreeBSD with automatic updates. I settled on FreeBSD 5.4 after many tries. > > I tried the Rose Attack / NewDawn against my laptop (it is a slow Pentium II 400 MHz Dell Inspiron 7000): > http://digital.net/~gandalf/Rose_Frag_Attack_Explained.htm > > Specifically: > ./NewDawn4 1 0 5 9999 99999999 4000 2 > > My machine locked up at pretty close to 100% when viewing the top command. > > I asked a fellow worker who had a PIII 733 MHz to take a look and he reported about 70% CPU increase. > > FYI. You might wish to take a look into this, IMHO this is a decent CPU DOS. > > Ken > > ------------------------------------------------------------------ > Do not meddle in the affairs of wizards for they are subtle and > quick to anger. > Ken Hollis - Gandalf The White - gandalf@digital.net - O- TINLC > WWW Page - http://gandalf.home.digital.net/ > Trace E-Mail forgery - http://gandalf.home.digital.net/spamfaq.html > Trolls crossposts - http://gandalf.home.digital.net/trollfaq.html > > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >