Xilinx-CNS / cns-sapi-ts

Other
4 stars 13 forks source link

Add a test for ICMP fragmentation needed DOS attack #83

Closed ol-alexandra closed 8 months ago

ol-alexandra commented 9 months ago

Please add a test with ICMP fragmentation needed DOS attack. The test would create a TCP or UDP connection, and send a lot of such ICMP with different MTUs to IUT referring this connection. At the end the test should ensure that the connection is still usable. In a sense, the test would be similar to attacks/icmp/icmp_flood.

Iterations:

Any additions to the test scenario are welcome.

NB in https://github.com/Xilinx-CNS/onload ci_ipp_pmtu_rx() I read:

  /* hardly a worth-while dos attack, however ... */
  /* ... (proof that i'm not great at predictions) by april 2005 it was picked
   *  up by the media as part of a world-spanning problem :-) */
okt-yurijp commented 8 months ago

The test was implemented and added to sapi-ts.