From owner-freebsd-bugs  Wed Mar 18 14:10:10 1998
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id OAA04511
          for freebsd-bugs-outgoing; Wed, 18 Mar 1998 14:10:10 -0800 (PST)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: (from gnats@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id OAA04467;
          Wed, 18 Mar 1998 14:10:04 -0800 (PST)
          (envelope-from gnats)
Received: from home.dragondata.com (toasty@home.dragondata.com [204.137.237.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA03887
          for <FreeBSD-gnats-submit@freebsd.org>; Wed, 18 Mar 1998 14:03:27 -0800 (PST)
          (envelope-from toasty@home.dragondata.com)
Received: (from toasty@localhost)
	by home.dragondata.com (8.8.8/8.8.5) id QAA27635;
	Wed, 18 Mar 1998 16:03:27 -0600 (CST)
Message-Id: <199803182203.QAA27635@home.dragondata.com>
Date: Wed, 18 Mar 1998 16:03:27 -0600 (CST)
From: toasty@dragondata.com
Reply-To: toasty@dragondata.com
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: kern/6059: Packets from 1.1.1.1 can crash 2.2 server
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         6059
>Category:       kern
>Synopsis:       Packets from 1.1.1.1 can crash 2.2 server
>Confidential:   yes
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Mar 18 14:10:02 PST 1998
>Last-Modified:
>Originator:     Kevin Day
>Organization:
DragonData
>Release:        FreeBSD 2.2.5-STABLE i386
>Environment:

2.2 server

>Description:

NOTE: This hasn't been well tested, if this is the result of operator error,
I apologize, but I can't afford to keep crashing my server to test it. :)

Flood a server with packets from a 1.1.1.1. 

Mar 18 02:02:17 toast /kernel.GENERIC: arpresolve: can't allocate llinfo for 1.1.1.1
Mar 18 02:02:38 toast last message repeated 6 times
Mar 18 02:03:31 toast last message repeated 3 times
Mar 18 02:10:02 toast last message repeated 10 times
Mar 18 02:23:02 toast last message repeated 20 times
Mar 18 02:34:55 toast last message repeated 15 times
Mar 18 02:42:32 toast last message repeated 15 times
Mar 18 02:49:02 toast last message repeated 10 times
Mar 18 03:00:32 toast last message repeated 10 times
Mar 18 03:13:32 toast last message repeated 20 times

After an hour or so of doing this, the server suggests more swap space, then
locks up.


>How-To-Repeat:

Spoof 1.1.1.1, and open lots of tcp connections.

>Fix:
	
No idea. :)
>Audit-Trail:
>Unformatted:
Kevin Day

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message