North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure

  • From: Iljitsch van Beijnum
  • Date: Thu May 13 14:13:55 2004

On 13-mei-04, at 19:48, Steven M. Bellovin wrote:

The same document that fully ignores that port number randomness will
severely limit the risk of susceptibility to such an attack?

How many zombies would it take to search the port number space
exhaustively?
How many route processors does it take to look at the packets from all those zombies? This very quickly becomes a DoS against the route processor rather than a TCP exploit.