This errata report looks correct and should be verified IMHO.

On 4/8/24 20:15, RFC Errata System wrote:
The following errata report has been submitted for RFC6274,
"Security Assessment of the Internet Protocol Version 4".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7887

--------------------------------------
Type: Editorial
Reported by: Niklas Baerveldt <[email protected]>

Section: 3.8.4

Original Text
-------------
The attacker is:

    o  Four hops away from A.

    o  Four hops away from B.

    o  Four hops away from C.

    o  Four hops away from D.

    In the network setup of Figure 3, the only system that satisfies all
    these conditions is the one marked as the "F".


Corrected Text
--------------
The attacker is:

    o  Four hops away from A.

    o  Four hops away from B.

    o  Four hops away from C.

    o  Three hops away from D.

    In the network setup of Figure 6, the only system that satisfies all
    these conditions is the one marked as the "F".


Notes
-----
Since the packets that D gets has a TTL of 62 while A,B and C gets packets with 
TTL of 61, it should be that D is one less hop away than the others. This also 
seems to be illustrated in Figure 6.

Text that seems to refer to the network setup of Figure 6 references to 
incorrect figure number 3.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC6274 (draft-ietf-opsec-ip-security-07)
--------------------------------------
Title               : Security Assessment of the Internet Protocol Version 4
Publication Date    : July 2011
Author(s)           : F. Gont
Category            : INFORMATIONAL
Source              : Operational Security Capabilities for IP Network 
Infrastructure
Stream              : IETF
Verifying Party     : IESG

_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec

_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec

Reply via email to