topic Re: Are PA-devices affected by the packets of death? in General Topics

Are PA-devices affected by the packets of death?

mikand — Wed, 06 Feb 2013 20:56:31 GMT

For more information see Not Just AstLinux Stuff: Packets of Death and http://www.kriskinc.com/intel-pod

http://sourceforge.net/p/e1000/bugs/119/?page=3 might be related aswell.

In short, a magic combo in packets will make the nic go completely offline. Only a powercycle (reboot will not help) will bring it back online (nice DoS capability). Seems to affect at least Intel 82574L ethernet controllers.

Re: Are PA-devices affected by the packets of death?

mikand — Fri, 08 Feb 2013 07:28:56 GMT

So ehm noone who knows if and if so which models of PA devices uses Intel 82574L ethernet controllers - and are they affected by the "packet of death"?

Re: Are PA-devices affected by the packets of death?

sdurga — Fri, 08 Feb 2013 11:26:34 GMT

We are in the process of replaying the packets in our lab. We will update you soon.

Re: Are PA-devices affected by the packets of death?

sdurga — Fri, 08 Feb 2013 22:09:31 GMT

PA is not effected by this as PA does not use intel drivers.

Thanks,

Sandeep T

Re: Are PA-devices affected by the packets of death?

mikand — Sat, 09 Feb 2013 03:18:03 GMT

Thanks! 🙂

However this is not driver related but hardware related.

From your answer it means that intel ethernet controllers are being used but in this case no PA-device is affected (im thinking not only the firewalls itselfs but also the panorama appliance and the other existing or upcoming applianceboxes)?

Re: Are PA-devices affected by the packets of death?

sdurga — Sat, 09 Feb 2013 05:04:18 GMT

I meant existing Paloalto is not using intel hardware and therefore no intel drivers are used, thus we are not effected. With regards to your virtual environment which is running panorama, it all depends on the NIC hardware used and will be beyond the scope of Paloalto. Regarding upcoming appliance boxes, I do not have any information.