[Dnsmasq-discuss] Too many DISCOVER packets than actual clients

2019-09-11 Thread P, Sreelakshmi
Hi, I have IXIA port connected to an interface on which dnsmasq is running. I'm simulating 8k DHCP clients from IXIA and see that there are more than 12k DISCOVER packets sent from IXIA, but the ones logged in dnsmasq log is exactly 8k. Why is this difference and what dnsmasq is doing with rema

[Dnsmasq-discuss] FW: Too many DISCOVER packets than actual clients

2019-09-11 Thread P, Sreelakshmi
Hi, I have IXIA port connected to an interface on which dnsmasq is running. I'm simulating 8k DHCP clients from IXIA and see that there are more than 12k DISCOVER packets sent from IXIA, but the ones logged in dnsmasq log is exactly 8k. Why is this difference and what dnsmasq is doing with rema

[Dnsmasq-discuss] Too many DISCOVER packets than actual clients

2019-05-17 Thread P, Sreelakshmi
Hi, I have IXIA port connected to an interface on which dnsmasq is running. I'm simulating 8k DHCP clients from IXIA and see that there are more than 12k DISCOVER packets sent from IXIA, but the ones logged in dnsmasq log is exactly 8k. Why is this difference and what dnsmasq is doing with rema

Re: [Dnsmasq-discuss] Configuring DHCPv6 Vendor specific information using Option 17

2019-03-13 Thread P, Sreelakshmi
provided, but I may have decoded it wrong. Cheers, Simon. On 04/03/2019 10:01, P, Sreelakshmi wrote: > Hi All, > >   > > How to we configure vendor specific information in dnsmasqv6 using > option 17? > >   > > Every time I tried to configure option 17 as b

[Dnsmasq-discuss] Configuring DHCPv6 Vendor specific information using Option 17

2019-03-04 Thread P, Sreelakshmi
Hi All, How to we configure vendor specific information in dnsmasqv6 using option 17? Every time I tried to configure option 17 as below : dnsmasq --dhcp-option=option6:17,003db85c00640035414f532d5377697463683a546f703a546f6b3 -test I ended up getting the below error: dnsma

[Dnsmasq-discuss] "No IPv6 address available" for bulk request from IXIA DHCPv6 clients

2019-02-07 Thread P, Sreelakshmi
Hi All, I'm trying to simulate DHCPv6 clients from IXIA and observe that only 1 or 2 clients gets honored with IPv6 address when simultaneous requests are sent from 64 clients, but the same thing works if the request is made one after the other sequentially. Configuration below:

Re: [Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2019-01-20 Thread P, Sreelakshmi
OS. If, on the other hand, the malformed packets are crashing dnsmasq and some daemon-framework is restarting it, that's bad, and we'd like to know about it. Cheers Simon. On 10/12/2018 05:59, P, Sreelakshmi wrote: > Hi All, > >   > > Does anyone has any updat

[Dnsmasq-discuss] DHCP DOS caused by malformed dhcp discover packet

2018-12-10 Thread P, Sreelakshmi
Hi All, A malformed dhcp discover packet can cause dnsmasq to be unresponsive for a small amount of time. If this was repeated over time an attacker could make the dhcp service unresponsive DOSing the box. Does dnsmasq validate the incoming DHCP packet? We are using v2.78. Are there any fixes

Re: [Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2018-12-09 Thread P, Sreelakshmi
Hi All, Does anyone has any update on this? Thanks! From: P, Sreelakshmi Sent: Friday, December 7, 2018 4:19 PM To: 'dnsmasq-discuss@lists.thekelleys.org.uk' Subject: Validation for malformed DHCP packets in dnsmasq Hi, We are using dnsmasq 2.78. We see that there are som

[Dnsmasq-discuss] Validation for malformed DHCP packets in dnsmasq

2018-12-07 Thread P, Sreelakshmi
Hi, We are using dnsmasq 2.78. We see that there are some security vulnerability w.r.t malformed DHCP packets as explained below. Problem 1: A malformed dhcp discover packet can cause dhcp to be unresponsive from the switch for a small amount of time. If this was repeated over time an attacker