Re: Port scan causing system crashes

I had a case where an rpc scan using nessus (I forget the particular module or if it was the nmap precursor scan, this was a couple of years ago) against some large range of ports knocked out an allegro-based embedded web server on a network switch. It didn't crash this particular switch (though one had to reboot the switch in order to bring back the web interface).

Clem Skorupka
Lead INFOSEC Scientist
The MITRE Corporation

"Whiteside, Larry [contractor]" wrote:

> I have seen this on numerous occasions. Mainly on Unix or AIX systems and mainframes. It is the way they handle the number of invalid tcp packet request. For each invalid tcp port that is probed, some AIX/Unix systems create a system message that takes a little bit more of the processor.

--





---------------------------------------------------------------------------
----------------------------------------------------------------------------