Bugtraq: Re: Denial of service attack against tcpdump

[Hugo.van.der.Kooij () CAIW NL (Hugo.van.der.Kooij () CAIW NL)]

On Tue, 2 May 2000 bretonh () PARANOIA PGCI CA wrote:

> There is a way to disable tcpdump running on a remote host.  By sending a
> carefully crafted UDP packet on the network which tcpdump monitors, it is
> possible, under certain circonstances, to make tcpdump fall into an infinite
> loop.
Could it be that iptraf suffers a similar weakness? (Or even worse?)

I noticed that iptraf dies on me too often during network tests.

Hugo.

--
Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
hvdkooij () caiw nl     http://home.kabelfoon.nl/~hvdkooij/
--------------------------------------------------------------
Quoting this tagline is illegal! (http://www.dtcc.edu/cs/rfc1855.html)