OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISSForum] Could RSKILL cause problems on a switch ?

issforum-adminiss.net
Date: Wed Jul 02 2003 - 09:27:54 CDT

Hi all,

I'd like to know if enabling RSKILL could cause some trouble to active network equipements mainly switches (cisco) ?

How does RSKILL work ? Does it block only the tcp connection which trigger the signature or all the traffic to the attacked host ?

We encounter a strange problem on our platform and we think that it's caused by the RSKILL that we just activate for testing matter.

As as we enabled the RSKILL and test it by establishing the connection that trigger the signature, the switch ( that is connected to the machine to which we send the attack) does not respond and all the machines behind this switch are not reacheable (they seem to be down because the switch is no longer alive in term of network ).

We want to know if RSKILL could be behind this problem or it's just a concidence. It's really strange if it can cause all this kind of trouble.

Network sensor ------- cisco hub_1 -------cisco switch_1 ---- cisco router ------ cisco switch_2 ---- machine
NB: machine: the machine againt which RSKILL is tested
        cisco switch_2 : is the switch which deos not respond (off in term of network)

Any help could be so appreciated.

Best Regards,

./Mohamed.

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo