On 9/16/16 1:39 PM, Cyrill Gorcunov wrote:
> On Fri, Sep 16, 2016 at 01:30:28PM -0600, David Ahern wrote:
>>> [root@pcs7 iproute2]# misc/ss -A raw
>>> State Recv-Q Send-Q Local Address:Port
>>> Peer Address:Port
>>>
>>> ESTAB 0 0
>>> 127.0.0.1:ipproto-255
>>> 127.0.0.10:ipproto-9090
>>> UNCONN 0 0
>>> 127.0.0.10:ipproto-255
>>> *:*
>>> UNCONN 0 0
>>> :::ipv6-icmp :::*
>>>
>>> UNCONN 0 0
>>> :::ipv6-icmp :::*
>>>
>>> ESTAB 0 0
>>> ::1:ipproto-255
>>> ::1:ipproto-9091
>>>
>>> so it get zapped out. Is there some other way to test it?
>>>
>>
>> I'm guessing you passed IPPROTO_RAW (255) as the protocol to socket(). If
>> you pass something
>> else (IPPROTO_ICMP for example) it won't work.
>
> True. To support IPPROTO_ICMP it need enhancement. I thought start with
> plain _RAW first and then extend to support _ICMP.
I thought raw in this case was SOCK_RAW as in the socket type.
Since the display is showing sockets in addition to IPPROTO_RAW:
$ ss -A raw
State Recv-Q Send-Q Local Address:Port Peer
Address:Port
UNCONN 0 0 *%eth0:icmp
*:*
It is going to be confusing if only ipproto-255 sockets can be killed.
