Re: Sessions Resource Exhaustion

"Andrew Hay" <[email protected]>
Newsgroups gmane.comp.security.ids
Message-ID <[email protected]>
I believe you just did :)

On 11/10/2007, Ravi Chunduru <[email protected]> wrote:
> using simple tools such as hping2 and others, i am able to exhaust
> session resources in some firewall and IPS devices. some firewalls and
> IPS devices addressing small business market segments seems to be
> supporting maximum of 10000 sessions.  these devices are not allowing
> any new connections if all 10000 sessions are used up.
>
> can i say that these devices are vulnerable to simple DoS attacks?
>
> thanks
> Ravi
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------
>
>


-- 
Andrew Hay
blog: https://www.andrewhay.ca
email: andrewsmhay || at || gmail.com
LinkedIn Profile: http://www.linkedin.com/in/andrewhay

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.