[tcpm] PoC for draft-moncaster-tcpm-rcv-cheat-02

Stefanos Harhalakis <v13@v13.gr> Tue, 25 March 2008 22:32 UTC

Return-Path: <tcpm-bounces@ietf.org>
X-Original-To: ietfarch-tcpm-archive@core3.amsl.com
Delivered-To: ietfarch-tcpm-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E84E43A698F; Tue, 25 Mar 2008 15:32:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.125
X-Spam-Level:
X-Spam-Status: No, score=-100.125 tagged_above=-999 required=5 tests=[AWL=0.312, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6DQAym9KM3sO; Tue, 25 Mar 2008 15:32:07 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 18D0C3A6AB2; Tue, 25 Mar 2008 15:32:07 -0700 (PDT)
X-Original-To: tcpm@core3.amsl.com
Delivered-To: tcpm@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 43D0C28C14A for <tcpm@core3.amsl.com>; Tue, 25 Mar 2008 15:32:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EIv-uMKGKVd8 for <tcpm@core3.amsl.com>; Tue, 25 Mar 2008 15:32:02 -0700 (PDT)
Received: from mx-out-01.forthnet.gr (unknown [193.92.150.105]) by core3.amsl.com (Postfix) with ESMTP id 1E88A28C10F for <tcpm@ietf.org>; Tue, 25 Mar 2008 15:32:01 -0700 (PDT)
Received: from mx-av-02.forthnet.gr (mx-av.forthnet.gr [193.92.150.27]) by mx-out-01.forthnet.gr (8.13.8/8.13.8) with ESMTP id m2PMTehd028591; Wed, 26 Mar 2008 00:29:40 +0200
Received: from MX-IN-02.forthnet.gr (mx-in-02.forthnet.gr [193.92.150.185]) by mx-av-02.forthnet.gr (8.14.1/8.14.1) with ESMTP id m2PMTeUI013224; Wed, 26 Mar 2008 00:29:40 +0200
Received: from hell.hell.gr (adsl7-208.lsf.forthnet.gr [79.103.134.208]) by MX-IN-02.forthnet.gr (8.14.2/8.14.2) with ESMTP id m2PMTc8l024929; Wed, 26 Mar 2008 00:29:40 +0200
Authentication-Results: MX-IN-02.forthnet.gr smtp.mail=v13@v13.gr; spf=neutral
Authentication-Results: MX-IN-02.forthnet.gr header.from=v13@v13.gr; sender-id=neutral
From: Stefanos Harhalakis <v13@v13.gr>
To: tcpm@ietf.org
Date: Wed, 26 Mar 2008 00:29:33 +0200
User-Agent: KMail/1.9.7
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200803260029.33658.v13@v13.gr>
Cc: bob.briscoe@bt.com
Subject: [tcpm] PoC for draft-moncaster-tcpm-rcv-cheat-02
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: tcpm-bounces@ietf.org
Errors-To: tcpm-bounces@ietf.org

Hello there,

While experimenting I've written a (small) python program that utilizes the 
TCP weakness that is addressed in draft-moncaster-tcpm-rcv-cheat-02 (which I 
discovered latter). Using it, I was able to make an (under my control) HTTP 
server generate a constant 5-minute (until I interrupted it) 900Mbps traffic 
over the Internet using just a DSL line. Theoretically it could also be done 
using a 64Kbps ISDN line, it is 100% reproduceable and it can be used on many 
web servers with fast internet connections.

I'm considering wether I should make this (small) tool public or not.

On the plus side: It can be used as a proof of concept and for easily testing 
future implementations of this draft (if it becomes an RFC)

On the minus side: Since it is very easy to use (no kernel patches etc), it 
can be easily abused by people that are not currently able to re-implement 
it.

So, I kindly ask for your advice:
Based on your experience, would it be of any use if I made this public?

Thank you in advance,
Harhalakis Stefanos
_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm