Re: DoS attack against TCP services

[christos%astron.com@localhost (Christos Zoulas)]

In article <Pine.NEB.4.64.1502101617420.812%6bone.informatik.uni-leipzig.de@localhost>,
 <6bone%6bone.informatik.uni-leipzig.de@localhost> wrote:
>
>The callout code in kern_timeout.c:
>
>                 if (delta <0)
>                          cc->cc_ev_late.ev_count++;
>
>At the same time, the problem occurs that expired entries are not deleted 
>from the ndp table. 'ndp -a' shows expired entries.
>
>Both problems occur only after several days of uptime. They probably have 
>the same cause.
>
>The problem you described is different.

I tried adding "show callout" to crash(8) but it is not useful because the
pointers move too quickly. OTOH, next time this happens you can enter ddb
on your machine and type "show callout" and see if that sheds any light
to the expired and not fired callouts...

christos