Re: [lwip-devel] SYN flood attack - lwip crash

[Kieran Mansley]

On Fri, 2009-01-30 at 10:39 +0100, Piero 74 wrote:
> Hi all
> 
> I did a test again using NMAP. I did an aggressive scan.
> I have LWIP running on my board, with 3 listener open.
> 
> After the scan, i couldn't connect to board using a tcp client.
> I debugging the code: lwip_stats doesn't show nothing strange, driver
> works, all pbufs seems free.
> 
> I have a wireshark log, but it's a zip file of 4MBytes... i suppose i
> cannot attach here
> If it could be useful, i can send it to a private email of someone of
> active developers... please provide me the email address.
> 
> I don't know how debug this situation.... i'm trying again now.... any
> idea????

Could you get a packet capture from just after the end of the scan?
That would be the most interesting part.  Maybe you could just truncate
your existing capture to show that?

Kieran