Subject: Re: interrupt rate from a NIC
To: Michael Graff <explorer@flame.org>
From: Kamal R Prasad <kamalrpr@in.ibm.com>
List: tech-net
Date: 05/23/2003 14:26:59
>It is trivial to DDoS a machine and cause the famous "live-lock"
>problem. This is where interrupts come in so fast that you can't do
>anything but service them, if that.
looks like everybody else has a different opinion.
>It doesn't occur at 100 Mbps or even gigabit traffic. It happens when
>you send lots and lots of minimal packets. A DS3 can take down a 100
yes- thats obvious. the smaller the packet size , greater the interrupt
rate.
>Mbps connected Pentium-3 866 Mhz. I know this from experienced.
is there a mathematical formula to decide if for a given cpu & bandwidth,
whether this type of DoS is feasible?
thanks
-kamal
--Michael