Hi,
a colleague pointed out the following problem: the various
forms of encapsulation of IP traffic might result in IP
datagrams which are larger than the IP maximum datagram
length (64k).

The problem arises with the various IP-in-IP encapsulations
(gif, maybe faith), with IPSEC, and with some multicast
processing.

I guess the correct way to solve the problem is to do
some form of fragmentation _before_ adding the new
header to the packet. This requires the replication of
some code which is in ip_output().

So i was wondering if there objections if in the long
term i pull out the fragmentation code from ip_output
and put it into a separate procedure that can be used
wherever is required without having to replicate the
code (and maintain it).

comments ?

        cheers
        luigi

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message

Reply via email to