accelerating porn downloads:
- TCP Congestion Control with Misbehaving Receiver. This paper describes 3 types of attacks against TCP congestion control mechanism. ACK division exploits byte granularity error control protocol by sending multiple (say X number) ACKs (or fragmented ACKs if I read the paper carefully) upon receiving one data segment. Since the ACKs are all valid, the sender will increase the congestion window rate at a factor of X. DupACK spoofing exploits TCP's fast retransmit and fast recovery algorithm. These two algorithms are used to mitigate the effects of packet loss. DupACK spoofing works by spoofing multiple duplicate ACKs for the last sequence number received, hence increasing the congestion window by 3*SMSS (Sender Maximum Segment Size). Optimistic ACKing works by sending a stream of ACKs for TCP data segment that has yet to be received, by using predicted sequence number for the next data.
This is all really cool stuff considering that a misbehaved receiver can manipute TCP and tricking the sender into sending more data faster.
- freecast. Technically, freecast allows you to stream audio and video streams faster by using peer-to-peer transport technology.
don't chunk with my tcp/ip:
- fragroute. Back when I was an IDS junkie (Intrusion Detection System), fragroute was one of the coolest toys to play with. It still is now.
- scapy. Another reason why I must kick my lazy ass and master Python. The best thing about scapy is that you can easily construct packets according to your own specification. You essentially put any options on any fields easily on a TCP/IP packets. All this can be done interactively via the Python interpreter.
Listening to: Mili Sefic - Chicago Sessions Nov '04