Re: Asterisk ignoring replayed libpcap sessions
Stefano Zanero <[email protected]> Mon, 30 Oct 2006 21:09:12 +0100
| Newsgroups | gmane.comp.security.vulnerabilities |
|---|---|
| Organization | Secure Network S.r.l. |
| Message-ID | <[email protected]> |
nnp wrote: > SIP is carried over UDP. Yes, that's true, but is it only SIP that you are talking about ? And even in that case... it's not so simple. TCPReplay also replays UDP packets, but if for instance those packets contain nonces, identifiers that can be changed from either side, or other elements of freshness, you can't expect that a server will react correctly to a blind REPLAY of a former session... much in the same way this wouldn't fly with TCP based protocols Stefano