<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://www.kerneltrap.org"  xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title>KernelTrap - Cisco</title>
 <link>http://www.kerneltrap.org/taxonomy/term/467/0</link>
 <description></description>
 <language>en-local</language>
<item>
 <title>BSDCan 2008: Stream Control Transmission Protocol</title>
 <link>http://www.kerneltrap.org/FreeBSD/BSDCan_2008_Stream_Control_Transmission_Protocol</link>
 <description>&lt;div class=&quot;taxonomy-images&quot;&gt;&lt;a href=&quot;/news/freebsd&quot; class=&quot;taxonomy-image-links&quot;&gt;&lt;img src=&quot;http://kt1.osuosl.org/files/category_pictures/K-FreeBSD_0.gif&quot; alt=&quot;FreeBSD news&quot; title=&quot;FreeBSD news&quot;  width=&quot;75&quot; height=&quot;75&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;!-- google_ad_section_start --&gt;&lt;p&gt;Randall Stewart of Cisco Systems gave a talk titled &lt;a href=&quot;http://www.bsdcan.org/2008/schedule/events/91.en.html&quot;&gt;SCTP, what it is and how to use it&lt;/a&gt;, discussing the Stream Control Transmission Protocol (SCTP).  A paper that was displayed on the overhead projecter before the talk began summarized:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&quot;Integrated into FreeBSD 7.0 -- first standardized by the Internet Engineering Task force (IETF) in October of 2000, in RFC 2960 and later updated by RFC 4960.  SCTP is a message oriented protocol providing reliable end to end communication between two peers in an IP network.&quot;&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Randall explained that SCTP is an alternative protocol to TCP, UDP.  To describe SCTP, he suggested you start with TCP features, including: reliable retransmission, congestion control, flow control, connection oriented, and selective acknowledgements.  You then add to it more features, including: &quot;association&quot; 4-way handshake, framing and ordered service, multistreaming, multihoming, and reachability.&lt;/p&gt;
&lt;!-- google_ad_section_end --&gt;&lt;p&gt;&lt;a href=&quot;http://www.kerneltrap.org/FreeBSD/BSDCan_2008_Stream_Control_Transmission_Protocol&quot; target=&quot;_blank&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://www.kerneltrap.org/FreeBSD/BSDCan_2008_Stream_Control_Transmission_Protocol#comments</comments>
 <category domain="http://www.kerneltrap.org/BSDCan">BSDCan</category>
 <category domain="http://www.kerneltrap.org/Cisco">Cisco</category>
 <category domain="http://www.kerneltrap.org/FreeBSD">FreeBSD</category>
 <category domain="http://www.kerneltrap.org/networking">networking</category>
 <category domain="http://www.kerneltrap.org/Randall_Stewart">Randall Stewart</category>
 <category domain="http://www.kerneltrap.org/SCTP">SCTP</category>
 <category domain="http://www.kerneltrap.org/news/freebsd">FreeBSD news</category>
 <pubDate>Sat, 17 May 2008 10:52:37 +0000</pubDate>
 <dc:creator>Jeremy</dc:creator>
 <guid isPermaLink="false">16144 at http://www.kerneltrap.org</guid>
</item>
<item>
 <title>Fair Queuing For ALTQ</title>
 <link>http://www.kerneltrap.org/DragonFlyBSD/Fair_Queuing_For_ALTQ</link>
 <description>&lt;div class=&quot;taxonomy-images&quot;&gt;&lt;a href=&quot;/news/dragonflybsd&quot; class=&quot;taxonomy-image-links&quot;&gt;&lt;img src=&quot;http://kerneltrap.org/files/category_pictures/K-FlyBSD_1.gif&quot; alt=&quot;DragonFlyBSD&quot; title=&quot;DragonFlyBSD&quot;  width=&quot;75&quot; height=&quot;75&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;!-- google_ad_section_start --&gt;&lt;p&gt;&quot;&lt;i&gt;I have a question for the PF/ALTQ masters out there,&lt;/i&gt;&quot; Matthew Dillon began on the DragonFlyBSD kernel mailing list, having recently switched from using a Cisco router to a DragonFlySD server running PF.  &quot;&lt;i&gt;I am trying to configure PF in a manner similar to what Cisco&#039;s fair-queue algorithm does.  Cisco&#039;s algorithm basically hashes TCP and UDP traffic based on the port/IP pairs, creating a bunch of lists of backlogged packets and then schedules the packets at the head of each list.&lt;/i&gt;&quot;  He went on to explain that he was unsuccessfully trying to configure the same thing with PF, &quot;&lt;i&gt;neither CBQ nor HFSC seem to work well.   I can separate certain types of traffic but the real problem is when there are multiple TCP connections that are essentially classified the same, and one is hogging the outgoing bandwidth.  So the question is, is there a PF solution for that or do I need to write a new ALTQ mechanic to implement fair queueing?&lt;/i&gt;&quot;&lt;/p&gt;
&lt;p&gt;Not finding a solution, he followed with a series of patches implementing what he needed.  He explained the resulting logic noting, &quot;&lt;i&gt;unless something comes up I am going to commit this to DragonFly on Friday and call it done.  I would be pleased if other projects picked up some or all of the work&lt;/i&gt;&quot;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&quot;The queues are scanned from highest priority to lowest priority; if the packet bandwidth on the queue does not exceed the bandwidth parameter and a packet is available, a packet will be chosen fro that queue; if a packet is available but the queue has exceeded the specified bandwidth, the next lower priority queue is scanned (and so forth); if NO lower priority queues either have packets or are all over the bandwidth limit, then a packet will be taken from the highest priority queue with a packet ready; packet rate can exceed the queue bandwidth specification (but will not exceed the interface bandwidth specification, of course), but under full saturation the average bandwidth for any given queue will be limited to the specified value.&quot;&lt;/p&gt;&lt;/blockquote&gt;
&lt;!-- google_ad_section_end --&gt;&lt;p&gt;&lt;a href=&quot;http://www.kerneltrap.org/DragonFlyBSD/Fair_Queuing_For_ALTQ&quot; target=&quot;_blank&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://www.kerneltrap.org/DragonFlyBSD/Fair_Queuing_For_ALTQ#comments</comments>
 <category domain="http://www.kerneltrap.org/ALTQ">ALTQ</category>
 <category domain="http://www.kerneltrap.org/Cisco">Cisco</category>
 <category domain="http://www.kerneltrap.org/DragonFlyBSD">DragonFlyBSD</category>
 <category domain="http://www.kerneltrap.org/Matthew_Dillon">Matthew Dillon</category>
 <category domain="http://www.kerneltrap.org/packet_filter">packet filter</category>
 <category domain="http://www.kerneltrap.org/PF">PF</category>
 <category domain="http://www.kerneltrap.org/news/dragonflybsd">DragonFlyBSD</category>
 <pubDate>Thu, 10 Apr 2008 19:45:07 +0000</pubDate>
 <dc:creator>Jeremy</dc:creator>
 <guid isPermaLink="false">15960 at http://www.kerneltrap.org</guid>
</item>
<item>
 <title>Feature:  Understanding TCP Reset Attacks, Part I</title>
 <link>http://www.kerneltrap.org/node/3072</link>
 <description>&lt;div class=&quot;taxonomy-images&quot;&gt;&lt;a href=&quot;/taxonomy/term/36&quot; class=&quot;taxonomy-image-links&quot;&gt;&lt;img src=&quot;http://kerneltrap.org/files/category_pictures/K-trap_0.gif&quot; alt=&quot;Features&quot; title=&quot;Features&quot;  width=&quot;75&quot; height=&quot;75&quot; /&gt;&lt;/a&gt;&lt;a href=&quot;/taxonomy/term/97&quot; class=&quot;taxonomy-image-links&quot;&gt;&lt;img src=&quot;http://140.211.166.79/files/category_pictures/K-OpenBSD_1.gif&quot; alt=&quot;OpenBSD feature article&quot; title=&quot;OpenBSD feature article&quot;  width=&quot;75&quot; height=&quot;75&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;!-- google_ad_section_start --&gt;&lt;p&gt;A vulnerability in TCP, the transmission control protocol, recently received some exposure in the media.  Paul Watson released a white paper titled &lt;a href=&quot;http://www.osvdb.org/reference/SlippingInTheWindow_v1.0.doc&quot; target=&quot;new&quot;&gt;Slipping In The window: TCP Reset Attacks&lt;/a&gt; at the 2004 &lt;a href=&quot;http://www.cansecwest.com/&quot; target=&quot;new&quot;&gt;CanSecWest&lt;/a&gt; conference, providing a much better understanding of the real-world risks of TCP reset attacks.&lt;/p&gt;
&lt;p&gt;To better understand the reality of this threat, KernelTrap spoke with Theo de