On Mon, 6 May 2002, Garrett Wollman wrote:

> <<On Mon, 6 May 2002 17:26:20 -0500 (CDT), Mike Silbersack <[EMAIL PROTECTED]> said:
>
> > Is doing this wise?  I have this nagging feeling that randomizing (or
> > zeroing on each new connection) the timestamp would degrade its usefulness
> > for PAWS checks and the like.  (Don't ask me how, I haven't thought it
> > through fully.)
>
> I don't think so, because the timestamps, as currently specified, are
> only meaningful within the context of a single connection.  See
> sections 1.2, 4.3, and 4.2 of RFC 1323.  The PAWS mechanism requires
> only that timestamps used by each connection be monotone increasing
> with respect to Sequence Number Arithmetic.  RFC 1323 does require
> (section 4.2.2) that the clock be between 1 ms and 1 s in period,
> which I think we already violate on some platforms, although not
> seriously; there probably should be a pre-computed (global) scaling
> factor as well.
>
> -GAWollman

I looked over both our and Linux's tcp stack to double-check, and it
appears that my memory was faulty.  You are correct, no PAWS checks are
done during TIME_WAIT recycling.  Initializing to zero is probably the
best idea; getting fancy with random starts doesn't really help anything.

Mike "Silby" Silbersack


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message

Reply via email to