>I suppose something going wrong when multiple mbuf cluster is
>used for encrypted TCP connection.
>Because as I tried to cat several different sized files,
>catting files bigger than around
>2048(mbuf cluster size) minus protocol header size
>seems to cause the problem.
>
>Because mbuf cluster could be shared by multiple outstanding
>packets, it might be encrypted by multiple times.
>I'll investigate this further.

        I think we have already fixed this in the past, by deep-copying cluster
        mbufs...  ipsec_copypkt() in sys/netinet6/ipsec.c.
        i'm running telnet chargen all the time between kame/bsdi3 and
        kame/netbsd and having no problem.

        note that there are differences among *BSD for checking for shared
        clusters.

itojun


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to