----- Original Message -----
Sent: Wednesday, July 02, 2003 4:27
PM
Subject: Could RSKILL cause problems on a
switch ?
Hi all,
I'd like to know if enabling RSKILL could cause
some trouble to active network equipements mainly switches
(cisco) ?
How does RSKILL work ? Does it block only the tcp
connection which trigger the signature or all the traffic to the attacked host
?
We encounter a strange problem on our platform
and we think that it's caused by the RSKILL that we just activate for testing
matter.
As as we enabled the RSKILL and test it
by establishing the connection that trigger the signature, the
switch ( that is connected to the machine to which we send the
attack) does not respond and all the machines behind this switch
are not reacheable (they seem to be down because the switch is no
longer alive in term of network ).
We want to know if RSKILL could be behind
this problem or it's just a concidence. It's really strange if
it can cause all this kind of trouble.
Network sensor ------- cisco hub_1 -------cisco
switch_1 ---- cisco router ------ cisco switch_2 ---- machine
NB: machine: the machine againt which
RSKILL is tested
cisco
switch_2 : is the switch which deos not respond (off in term of
network)
Any help could be so appreciated.
Best Regards,
./Mohamed.
