Re: pkg/49860: DoS against snmpd on netbsd routers

[Robert Story <rstory%tislabs.com@localhost>]

The following reply was made to PR pkg/49860; it has been noted by GNATS.

From: Robert Story <rstory%tislabs.com@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/49860: DoS against snmpd on netbsd routers
Date: Mon, 4 May 2015 11:44:23 -0400

 --Sig_/dHs7T9lifRhKiOS6liV+W4a
 Content-Type: text/plain; charset=US-ASCII
 Content-Transfer-Encoding: quoted-printable
 
 RS>  On Sat, 2 May 2015, Christos Zoulas wrote:
 RS>=20
 RS>  I got the following tip: it looks like the inetNetToMediaTable is the=
 =20
 RS>  problem, so you could disable it as a workaround. add "-I=20
 RS>  -inetNetToMediaTable" to your snmpd command line.
 RS>=20
 RS>  The workaround helps.
 
 Glad that helped. I have a couple of ideas on a real fix. Anyone got a way
 to reproduce the issue that doesn't involve running a scan/attack on my
 local network?
 
 Robert
 
 --=20
 Senior Software Engineer @ Parsons
 
 --Sig_/dHs7T9lifRhKiOS6liV+W4a
 Content-Type: application/pgp-signature
 Content-Description: OpenPGP digital signature
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
 iQIcBAEBAgAGBQJVR5PbAAoJEMHFVuy5l8Y4bj0QAI3YKk3oGui6Wgt3EvOwToBw
 Jf4W79NTQ0eHi4mKViDKmlWO9pIan43aZ/LAgNk1qJX8BjTREjIkwBigWvanQX01
 0pfhq6kSCm0e9c8Ke+X1HD5agNq0dCBVlieezGoJOu+vRO3koQ3uAqyrVqohuQfb
 rsx9ID557j8sIk78NwuvS6QifwXjmCavrDTN4hilgSK9VopX3j7AepGGvaCnur/6
 sKtyzyFzSHZ41gluddpzaPi5Qbbqfs3LprbxqKro+NoZ6cimi3u0wDGfUZ6F6GeI
 ddsE+xR89cY0Wp7GktxFNVgo5e+x4pTFXHmuGFD0YVvkYH6dL601hMFqgftsyu4V
 vwBbCm4vf+Vpz2BDK7oTPqkWxeUGovwMjJPhOhlWDIHtDVg/EVQwckbSdapJIZ6t
 zC7ZKsUUWViXzUNiyk3bgmdJioa+/ZkY3uWglzPnDlh+JGJBdEKJg5879yj7USh8
 QEXE2lc87h9ywGsTMDLnd+pxGHS4Ke+7nTKYbLjZWcdGVx3zFozfrNiOuEv0MwDh
 vlRZh4m6RTyfk6VbdrO18uZctgZaf/jR1wDYR79/UmEHR2lMBRmu+cQd/6BAgIPE
 fV+5Y3U1ao6P/VkI0IQwQnLHbRt7rvQ47q2+1hzoS23tTrzjxHyJUFGz/iBdbxhW
 fytNI2AshZR9HhMAZgUQ
 =JO7p
 -----END PGP SIGNATURE-----
 
 --Sig_/dHs7T9lifRhKiOS6liV+W4a--