From owner-freebsd-security  Thu Sep  9  3:18:53 1999
Delivered-To: freebsd-security@freebsd.org
Received: from cheops.anu.edu.au (cheops.anu.edu.au [150.203.76.24])
	by hub.freebsd.org (Postfix) with ESMTP id B0BDF1508B
	for <freebsd-security@FreeBSD.ORG>; Thu,  9 Sep 1999 03:18:44 -0700 (PDT)
	(envelope-from avalon@cheops.anu.edu.au)
Received: (from avalon@localhost)
	by cheops.anu.edu.au (8.9.1/8.9.1) id UAA02113;
	Thu, 9 Sep 1999 20:15:49 +1000 (EST)
From: Darren Reed <avalon@coombs.anu.edu.au>
Message-Id: <199909091015.UAA02113@cheops.anu.edu.au>
Subject: Re: mbuf shortage situations
To: stas@sonet.crimea.ua (Stas Kisel)
Date: Thu, 9 Sep 1999 20:15:47 +1000 (EST)
Cc: freebsd-security@FreeBSD.ORG
In-Reply-To: <199909090802.MAA16555@sonet.crimea.ua> from "Stas Kisel" at Sep 9, 99 12:02:45 pm
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In some mail from Stas Kisel, sie said:
[...]
> IMHO it is a good idea to develop tcp_drain() from /sys/netinet/tcp_subr.c
> It should be quite intellectual to select a target - a process or a uid,
> which does not read properly from it's sockets, and has many data in mbufs.

The problem with this is the BSD TCP/IP implementation ACK's (or at least
attempts to ACK) data as soon as it is received and it is a big no-no to
discard queued data that has already been ACK'd.

Darren


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message