Re: Sessions Resource Exhaustion
"Andrew Hay" <[email protected]>
| Newsgroups | gmane.comp.security.ids |
|---|---|
| Message-ID | <[email protected]> |
I believe you just did :) On 11/10/2007, Ravi Chunduru <[email protected]> wrote: > using simple tools such as hping2 and others, i am able to exhaust > session resources in some firewall and IPS devices. some firewalls and > IPS devices addressing small business market segments seems to be > supporting maximum of 10000 sessions. these devices are not allowing > any new connections if all 10000 sessions are used up. > > can i say that these devices are vulnerable to simple DoS attacks? > > thanks > Ravi > > ------------------------------------------------------------------------ > Test Your IDS > > Is your IDS deployed correctly? > Find out quickly and easily by testing it > with real-world attacks from CORE IMPACT. > Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw > to learn more. > ------------------------------------------------------------------------ > > -- Andrew Hay blog: https://www.andrewhay.ca email: andrewsmhay || at || gmail.com LinkedIn Profile: http://www.linkedin.com/in/andrewhay ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------