tag:blogger.com,1999:blog-1727036611545335768.post6447316472213033756..comments2024-01-17T06:16:28.153+05:30Comments on MPLSVPN - Moving Towards SDN and NFV Based Networks: Cisco VulnerablityShivlu Jainhttp://www.blogger.com/profile/18067647693954733854noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-1727036611545335768.post-77613470867990138342008-09-26T12:00:00.000+05:302008-09-26T12:00:00.000+05:30As per sanjay analysis in our network this attack ...As per sanjay analysis in our network this attack happened on prot 47 and prot 115 GRE and L2TPV3 , which basically sending any TTL value and finishing the input queues , so traffic flow stops . Which process occupied the buffer not releasing.<BR/><BR/>example<BR/><BR/>Buffer information for Big buffer at 0x67F2D70<BR/> data_area 0x7851B804, refcount 1, next 0xFBD47A0, flags 0x200<BR/> linktype 7 (IP), enctype 0 (None), encsize 18, rxtype 1<BR/> if_input 0x6556BB4 (GigabitEthernet0/3), if_output 0x0 (None)<BR/> inputtime 3d19h (elapsed 00:00:00.008)<BR/> outputtime 3d19h (elapsed 00:00:17.832), oqnumber 65535<BR/> datagramstart 0x7851B858, datagramsize 1492, maximum size 1692<BR/> mac_start 0x7851B846, addr_start 0x7851B846, info_start 0x0<BR/> network_start 0x7851B858, transport_start 0x7851B854, caller_pc 0x297608<BR/> <BR/> source: xx.xx.xx.xx, destination: xx.xx.xx.xx, id: 0xD411, ttl: 255, prot: 47<BR/><BR/>Buffer information for Small buffer at 0xDDCAC6C<BR/> data_area 0x78562964, refcount 1, next 0x0, flags 0x200<BR/> linktype 7 (IP), enctype 0 (None), encsize 14, rxtype 1<BR/> if_input 0x6556BB4 (GigabitEthernet0/3), if_output 0x0 (None)<BR/> inputtime 3d19h (elapsed 00:00:00.004)<BR/> outputtime 3d19h (elapsed 00:00:12.820), oqnumber 65535<BR/> datagramstart 0x785629B8, datagramsize 58, maximum size 260<BR/> mac_start 0x785629AA, addr_start 0x785629AA, info_start 0x0<BR/> network_start 0x785629B8, transport_start 0x785629CC, caller_pc 0x297608<BR/><BR/> source: x.xx.xx.xx, destination: xx.xx.xx.xx, id: 0xF604, ttl: 254, prot: 115Shivlu Jainhttps://www.blogger.com/profile/18067647693954733854noreply@blogger.com