Subject: Re: RFC: Established connections hash function

From: Andi Kleen <[email-masked]>
Date: Wed, 28 Mar 2007 11:29:43 +0200

> 
> > But I think it can be mostly ignored.
> 
>     With all due respect, it cannot. An attacker with a small-sized botnet 
> (which is ~250 hosts) can create chains that contain well in excess of 3000 
> items. 

Most likely they can also easily generate enough latency data to crack any simple
hash function then.

-Andi