Subject: Re: interrupt rate from a NIC
To: Michael Graff <explorer@flame.org>
From: Kamal R Prasad <kamalrpr@in.ibm.com>
List: tech-net
Date: 05/23/2003 14:26:59
>It is trivial to DDoS a machine and cause the famous "live-lock"
>problem.  This is where interrupts come in so fast that you can't do
>anything but service them, if that.

looks like everybody else has a different opinion.

>It doesn't occur at 100 Mbps or even gigabit traffic.  It happens when
>you send lots and lots of minimal packets.  A DS3 can take down a 100

yes- thats obvious. the smaller the packet size , greater the interrupt 
rate.

>Mbps connected Pentium-3 866 Mhz.  I know this from experienced.

is there a mathematical formula to decide if for a given cpu & bandwidth, 
whether this type of DoS is feasible?
thanks
-kamal

--Michael