[25153] in bugtraq
Re: Snort exploits
daemon@ATHENA.MIT.EDU (der Mouse)
Thu Apr 18 21:28:13 2002
Date: Thu, 18 Apr 2002 14:14:10 -0400 (EDT)
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
Message-Id: <200204181814.OAA27643@Sparkle.Rodents.Montreal.QC.CA>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
To: bugtraq@securityfocus.com
In-Reply-To: <B8E45269.6795%roesch@sourcefire.com>
> Tiny frags do happen, but I've rarely see them outside of live
> attacks. Then again, I don't hang on .edu networks very much... ;)
I was, until very recently (<24hrs ago), behind a link with MTU 1400.
I regularly saw tiny fragments; they happened whenever anyone who
wasn't trying to do PMTU-D tried to talk to me.
Just for what it may be worth.
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse@rodents.montreal.qc.ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
