Re: Divert Sockets & Fragmentation revisited

2001-01-28 Thread Julian Elischer
Alwyn Goodloe wrote: > > Guys still having problems with divert sockets and fragmentation. [EMAIL PROTECTED] is your man... -- __--_|\ Julian Elischer / \ [EMAIL PROTECTED] ( OZ) World tour 2000 ---> X_.---._/ v To Unsubscribe: send mail to [EMA

Re: packet redirection design problem [Divert Sockets & Fragmentation revisited]

2001-01-27 Thread mouss
the "defrag all" feature of Linux solves the discussed problem, but can be improved. We do not need to defrag the packets. We just need to queue them. and, when the first frag has been received, we only need to save the informations necessary for filtering (ip header stuff + ports for TCP/UDP and

Re: packet redirection design problem [Divert Sockets & Fragmentation revisited]

2001-01-27 Thread Peter Pentchev
On Fri, Jan 26, 2001 at 09:00:54PM +0100, mouss wrote: > "IP filtering engines" that do something to packet based on rule > matching have a problem when fragmentation comes to play. > > In the case of a "packet redirector' such as divert, the problem is that > only the first fragment will match t

packet redirection design problem [Divert Sockets & Fragmentation revisited]

2001-01-26 Thread mouss
"IP filtering engines" that do something to packet based on rule matching have a problem when fragmentation comes to play. In the case of a "packet redirector' such as divert, the problem is that only the first fragment will match the rule, if the rule uses ports or whatever info contained in the

Re: Divert Sockets & Fragmentation revisited

2001-01-26 Thread Archie Cobbs
Alwyn Goodloe writes: > Guys still having problems with divert sockets and fragmentation. > > As I said in a previous post the divert operations and corresponding program > work fine when the datagram sent have size < MTU (1500) but when the > datagram has size > MTU and hence get fragmented

Re: Divert Sockets & Fragmentation revisited

2001-01-26 Thread Alwyn Goodloe
Having run lsof I can verify that the program IS reading on that port number. Has anyone else on the hacker list had problems with diverting fragmented datagrams?? Alwyn Goodloe [EMAIL PROTECTED] On Fri, 26 Jan 2001, Patrick Bihan-Faou wrote: > Hi, > > Sorry to state something that is

Re: Divert Sockets & Fragmentation revisited

2001-01-26 Thread Alwyn Goodloe
Thanks for the suggestion I will give lsof a shot to see. I think the port binding is correct, otherwise I don't think it would work when datagrams aren't fragmented. Like I said the code works fine for datagrams < MTU ==> not fragmented but fails when they are. That being said it NEVER HUR

Re: Divert Sockets & Fragmentation revisited

2001-01-25 Thread Patrick Bihan-Faou
Hi, Sorry to state something that is obvious, but when you bind your socket to the port, you have the port in the correct (network) order ? i.e. do you use htons(DIVERTPort) ? If you have lsof installed, run it and look at the port number that your program listens on. Patrick. > Here is th

Divert Sockets & Fragmentation revisited

2001-01-25 Thread Alwyn Goodloe
Guys still having problems with divert sockets and fragmentation. As I said in a previous post the divert operations and corresponding program work fine when the datagram sent have size < MTU (1500) but when the datagram has size > MTU and hence get fragmented the recfrom just waits never rec