Re: [tcpm] Fwd: New Version Notification fordraft-gont-tcpm-urgent-data-00

Andrew Yourtchenko <> Mon, 10 November 2008 05:40 UTC

Return-Path: <>
Received: from [] (localhost []) by (Postfix) with ESMTP id 742013A69DD; Sun, 9 Nov 2008 21:40:32 -0800 (PST)
Received: from localhost (localhost []) by (Postfix) with ESMTP id 1C8FA3A69DD for <>; Sun, 9 Nov 2008 21:40:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.602
X-Spam-Status: No, score=-1.602 tagged_above=-999 required=5 tests=[AWL=0.997, BAYES_00=-2.599]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id OuHG9lmIFZcz for <>; Sun, 9 Nov 2008 21:40:30 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id A099B3A63EB for <>; Sun, 9 Nov 2008 21:40:29 -0800 (PST)
X-TACSUNS: Virus Scanned
Received: from (localhost []) by (8.11.7p3+Sun/8.11.7) with ESMTP id mAA5dnU19531; Mon, 10 Nov 2008 06:39:49 +0100 (CET)
Received: from kk-son ( []) by (8.11.7p3+Sun/8.11.7) with ESMTP id mAA5dNG19381; Mon, 10 Nov 2008 06:39:23 +0100 (CET)
Date: Mon, 10 Nov 2008 06:39:27 +0100
From: Andrew Yourtchenko <>
To: Fernando Gont <>
In-Reply-To: <>
Message-ID: <>
References: <> <> <> <> <> <> <> <> <> <> <> <> <> <>
MIME-Version: 1.0
Cc:,, Joe Touch <touch@ISI.EDU>, David Borman <>, "Eddy, Wesley M. (GRC-RCN0)[VZ]" <>
Subject: Re: [tcpm] Fwd: New Version Notification fordraft-gont-tcpm-urgent-data-00
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"

On Mon, 10 Nov 2008, Fernando Gont wrote:

> At 01:47 a.m. 10/11/2008, Eddy, Wesley M. (GRC-RCN0)[VZ] wrote:
>> I have a question for the authors.  The survey you did of different OSes
>> and how they handle urgent data is good; did you do any similar study
>> of applications and which ones attempt to use urgent data?
> Not yet.
> For open source ones I guess we could simply grep lots and lots of source 
> files. For others it might be a little bit more difficult. I recall being 
> told that e.g., MS SQL uses urgent data... and there may be many others...

I think it was oracle SQL*Net:

Default is to "use urgent data". I'll try to find an oracle install to see 
what the "urgent data" constitutes there.

One other possible candidate (to be verified) might include Citrix 
terminal server traffic (the anecdotal evidence taken from snort-users 
archive, e.g.:

However, both are "closed domain" applications - i.e., usually both 
ends of them are under single administrative domain, so regardless of 
which behaviour they use, standards compliant or not, it can be solved 
with configuration.

The bigger problem is for internet-wide applications, e.g. for FTP, whose 
ABOR command appears to utilise the TCP Urgent as well. Ironically, the 
standard command-line ftp client on linux is BSD, so all the 
"standards-compliant" servers are effectively "broken" by default.

There could be some more proprietary apps as well, since the searchable 
discussion forums on the internet include quite a lot of discussions on 
this topic from the puzzled application programmers.

tcpm mailing list