From owner-freebsd-net Tue Jan 21 6:11:16 2003 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 89E7637B401 for ; Tue, 21 Jan 2003 06:11:12 -0800 (PST) Received: from mx1.dev.itouchnet.net (devco.net [196.15.188.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 261FA43F43 for ; Tue, 21 Jan 2003 06:11:09 -0800 (PST) (envelope-from bvi@moria.org) Received: from nobody by mx1.dev.itouchnet.net with scanned_ok (Exim 3.35 #1) id 18azBE-0007Gc-00 for freebsd-net@freebsd.org; Tue, 21 Jan 2003 16:15:08 +0200 Received: from devco.net ([196.15.188.2] helo=Beastie) by mx1.dev.itouchnet.net with smtp (Exim 3.35 #1) id 18azBE-0007GK-00; Tue, 21 Jan 2003 16:15:08 +0200 Message-ID: <018501c2c156$959feef0$0b01a8c0@Beastie> Reply-To: "Barry Irwin" From: "Barry Irwin" To: "Jacques A. Vidrine" , Cc: "Alex" , References: <20030121131442.GA59186@opus.celabo.org> Subject: Re: possible DoS in dc driver Date: Tue, 21 Jan 2003 16:08:07 +0200 Organization: Moria Research MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Checked: This message has been scanned for any virusses and unauthorized attachments. X-iScan-ID: 27932-1043158508-14982@unconfigured version $Name: REL_2_0_4 $ Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi All, For what it is worth, I just tried it on a 4.3 box running the DLINK 570TX quad port cards From linux box [root@web1 labsadmin]# ping -s 5000 victim PING victim (10.10.10.1 ) from 192.168.7.7 : 5000(5028) bytes of data. 5008 bytes from devco.net (196.15.188.2): icmp_seq=0 ttl=255 time=2.596 msec 5008 bytes from devco.net (196.15.188.2): icmp_seq=1 ttl=255 time=2.552 msec 5008 bytes from devco.net (196.15.188.2): icmp_seq=2 ttl=255 time=2.536 msec On the BSD system #uname -a FreeBSD victim 4.3-RELEASE-p14 FreeBSD 4.3-RELEASE-p14 #4: Thu Aug 23 08:42:48 SAST 2001 bvi@XXXXX i386 from dmesg.boot dc0: port 0xc000-0xc07f mem 0xe5000000-0xe50003ff irq 11 at device 4.0 on pci2 dc0: Ethernet address: 00:80:c8:cd:20:95 miibus0: on dc0 ukphy0: on miibus0 ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto dc1: port 0xc400-0xc47f mem 0xe5001000-0xe50013ff irq 5 at device 5.0 on pci2 dc1: Ethernet address: 00:80:c8:cd:20:96 miibus1: on dc1 ukphy1: on miibus1 ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto dc2: port 0xc800-0xc87f mem 0xe5002000-0xe50023ff irq 12 at device 6.0 on pci2 dc2: Ethernet address: 00:80:c8:cd:20:97 miibus2: on dc2 ukphy2: on miibus2 ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto dc3: port 0xcc00-0xcc7f mem 0xe5003000-0xe50033ff irq 10 at device 7.0 on pci2 dc3: Ethernet address: 00:80:c8:cd:20:98 miibus3: on dc3 ukphy3: on miibus3 ukphy3: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Box is happy with no errors. Been running the dlink cards on a number of boxes round the world for near on 2 years with no trouble. Barry -- Barry Irwin bvi@itouchlabs.com Tel: +27214875178 Systems Administrator: Networks And Security iTouch TAS http://www.itouchlabs.com Mobile: +27824457210 ----- Original Message ----- From: "Jacques A. Vidrine" To: Cc: "Alex" ; Sent: Tuesday, January 21, 2003 3:14 PM Subject: possible DoS in dc driver > Looooong, loooong ago, someone reported a dc driver bug. However, > a couple of us have tried and failed to reproduce the problem. I > thought I'd bounce the issue here before completely forgetting about > it. > > Cheers, > -- > Jacques A. Vidrine http://www.celabo.org/ > NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos > jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se > > ----- Forwarded message from Alex ----- > Date: Mon, 01 Jul 2002 15:21:16 +0600 > From: Alex > To: security-officer@FreeBSD.org, karaul@ngs.ru > Subject: Bug report > > From: karaul@ngs.ru, Alex S. Kabakaev, Tomsk Polytechnic University, > Russia > To: FreeBSD bug team > I got the problem: > FreeBSD computers freezes when i "ping -f -s 50000 any.freebsd.box" from > linux box. > And only reset can help to unfreeze them. There is no errors on screen > or in logs. > There is a number of tested configurations and realises: > FreeBSD 4.4 on: > 1. Duron 650, MB=epox(VIA KT133), Network Card=Matronix MX 3191(dc0 > kernel module), 10 MBit per second Hub > 2. K6-2 333, Mother Board = VIA MVP3, Network Card=Davicom Semiconductor > DM9102AM(dc0 kernel module), 10 MBit per second Hub > > With FreeBSD 4.6 on K6-2 333, Mother Board = VIA MVP3, Network > Card=Matronix MX 3191(dc0 kernel module), 10 MBit per second Hub > And Any time i ping with flood and packet size >=30000 all this > configurations get freeze. > IMHO there is a bug with "dc0" kernel module. > > To make sure i prodused this test with FreeBSD 4.6 on MB=Lucky Star (VIA > 8601T MVP3), integrated network card (Realtek RTL 8139) with another > network kernel module. And there was no errors, freezes or bugs. That's > why i think it's a bug with "dc" module. > > Thanks for attention. > Mailto: karaul@ngs.ru > CC: kas592@ic.tsu.ru > > > > ----- End forwarded message ----- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message