cancel
Showing results for 
Search instead for 
Did you mean: 

tcp_isn_passphrase question

SOLVED
Go to solution
Adam W.
Valued Contributor

tcp_isn_passphrase question

Guru's my current settings on my servers for tcp_isn_passphrase is 0. What impact will it have if I changed the setting to =1?
There are two types of people in the world, Marines and those who wish they were.
5 REPLIES
Patrick Wallek
Honored Contributor
Solution

Re: tcp_isn_passphrase question

Adam W.
Valued Contributor

Re: tcp_isn_passphrase question

Patrick, What I gather from the thread is that there is a change (of course) but nothing that will be noticed at all. Right?
There are two types of people in the world, Marines and those who wish they were.
Laurent Menase
Honored Contributor

Re: tcp_isn_passphrase question

Hi Adam,

the isn (initial sequence number) will be randomized RFC 1948.
The passphrase used will be "1"
you can set to any value since the kernel will use it as a passphrase when generating the seed of the randomization.- other parameters are taken.

when getting the value you will get 1.

Once enabled, it can't be disabled except rebooting, since that "ndd -set /dev/tcp tcp_isn_passphrase 0" will set the passphrase to "0" and don't reset it.



Laurent Menase
Honored Contributor

Re: tcp_isn_passphrase question

yes the result is compatible with TCP RFCs, so no noticeable change will be seen at all from applications or users, or peer systems.
Adam W.
Valued Contributor

Re: tcp_isn_passphrase question

Thanks Guys.
There are two types of people in the world, Marines and those who wish they were.