Re: An interesting packet inspection problem

[Valdis.Kletnieks () vt edu]

On Sat, 14 Jan 2006 21:50:49 GMT, Drsolly said:

> But the x's are hexadecimal bc, six of them, and that's the "active 
> ingredient".

Many moons ago, a software package called VMNET kept crashing the FDDI ring
at the JVNC, near Princeton University.  Basically, VMNET was layering IBM's
NJE protocol used by Bitnet over TCP/IP - and the format of an NJE SIGNON
packet to start a link up, when stuffed into the FDDI format (which on the
wire was some NRZI or some such thing), resulted in a too-long run of zero
bits (basically, no laser for a long time), causing the other end to lose
timing sync due to clock drift.

It would be interesting if you tried *other* protocols (for instance, an
ICMP Echo Request) with the problem 6 bytes as a payload.  If that fails
as well, that would tend to strengthen the idea that it's a data-dependent
hardware issue....

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.