Re: Asterisk ignoring replayed libpcap sessions
Pravin <[email protected]> Mon, 30 Oct 2006 10:45:37 +0530
| Newsgroups | gmane.comp.security.vulnerabilities |
|---|---|
| Message-ID | <[email protected]> |
Well, I am not sure but, does tcpreplay takes care of sequence numbers? May be the victim is selecting different initial sequence number everytime, Does tcpreplay modifies the sequence number accordingly? On 10/29/06, nnp <[email protected]> wrote: > Hey, > I'm currently testing the Asterisk PBX for vulnerabilities but I just > encountered an interesting problem when trying to recreate a crash. > Using a fuzzer I can crash it in the exact same place every time. I am > recording these session using ethereal (wireshark) and then replaying > them using tcpreplay e.g > > sudo tcpreplay -i lo dieAsterisk.eth > > Anyways, the problem is Asterisk completely ignores the data sent to > it via tcpreplay. I'm not sure what the issue could be. The packets > replayed are identical. Is anyone aware of any checksum that takes > timing into account or whatnot in Asterisk? > > Thanks, > nnp > > -- > http://silenthack.co.uk > -- Pravin Shinde