OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: ^A^A^H junk -> Bad device found :-)
From: Christopher E. Brown (cbrowndenalics.net)
Date: Mon Mar 27 2000 - 18:28:21 CST

On Sun, 26 Mar 2000, Gerald Richter wrote:

> > On Sun, Mar 26, 2000 at 02:55:04PM +0200, Gerald Richter wrote:
> > > [...] So we can be very sure that we have found the
> > > problematic device. The bridge is a realtime linux based bandwidth
> > > management system.
> >
> > We want the names! :-)
> >
>
> Yes, of course, but I don't know it either, otherwise I had already told
> you. As soon as I know more, I will post it to the list...

        Hmm, Linux based, but operating like a bridge. Sounds like an
ETINC BWManager system. (The normal Linux bridging mode and IP QoS
subsystem *do not* play together). IIRC the ETINC system is for
FreeBSD and Linux, and is a modular add in to the network layer.

        The normal Linux QoS system would not behave this way (does
not do bridge + QoS). You can do proxy ARP, but then it would show on
a traceroute, and as *all* the mail for every mail server I have goes
through a Linux QoS enabled router, and %90 of em are Linux based mail
servers and I have never seen this I would say its an add in. Maybe
not a BWManager from Dennis, but def an add on. 

---
As folks might have suspected, not much survives except roaches, 
and they don't carry large enough packets fast enough...
        --About the Internet and nuclear war.