Re: Wrong order in rc.d (pf and ipv6)

2007-08-26 Thread Kevin Oberman
> Date: Sat, 25 Aug 2007 21:46:11 -0700 (PDT) > From: Doug Barton <[EMAIL PROTECTED]> > Sender: [EMAIL PROTECTED] > > On Thu, 23 Aug 2007, Henri Hennebert wrote: > > > Hello, > > > > I notice that after a reboot, my pf rules don't take the ipv6 address > > (managed with ipv6_ifconfig_rl0="2001:.

BPF divide instruction

2007-08-26 Thread Matthew Luckie
BPF includes a divide instruction. As best I can tell, libpcap does not ever output a BPF divide instruction, which indicates that use of the BPF divide instruction is probably going to be done with a BPF program created by hand. Can anyone provide any examples of a BPF program where a divide

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Norberto Meijome
On Sun, 26 Aug 2007 19:19:47 +0300 "Vlad GALU" <[EMAIL PROTECTED]> wrote: >ports/netsed + pf/ipf (for transparent proxying) >Of course, the overhead is big. great, thanks , that may do - i may only need it for a proof of concept at this time. cheers, B _ {Beto|N

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Norberto Meijome
On Sun, 26 Aug 2007 15:54:43 +0300 Alexander Motin <[EMAIL PROTECTED]> wrote: > Hi. > > Norberto Meijome wrote: > > is there any already existing Netgraph node that would allow me to replace > > bytes in the data part of a packet? I'm talking about generic "foo" for > > "BAR" replacement, tho

Re: kern/113359: [ipv6] panic sbdrop after ICMP6, packet too big

2007-08-26 Thread remko
Synopsis: [ipv6] panic sbdrop after ICMP6, packet too big State-Changed-From-To: open->closed State-Changed-By: remko State-Changed-When: Sun Aug 26 17:53:54 UTC 2007 State-Changed-Why: Duplicate of 99779, which was fixed on RELENG_6 with: src/sys/kern/uipc_socket.c: 1.280 (thanks frank for t

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Vlad GALU
On 8/26/07, Norberto Meijome <[EMAIL PROTECTED]> wrote: > hi all, > is there any already existing Netgraph node that would allow me to replace > bytes in the data part of a packet? I'm talking about generic "foo" for > "BAR" replacement, though different lengths would be good too. > > or maybe

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Alexander Motin
Hi. Norberto Meijome wrote: is there any already existing Netgraph node that would allow me to replace bytes in the data part of a packet? I'm talking about generic "foo" for "BAR" replacement, though different lengths would be good too. There is no such node. This is not an easy task to

Re: kern/113359: panic sbdrop after ICMP6, packet too big

2007-08-26 Thread Frank Behrens
The following reply was made to PR kern/113359; it has been noted by GNATS. From: "Frank Behrens" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: Subject: Re: kern/113359: panic sbdrop after ICMP6, packet too big Date: Sun, 26 Aug 2007 14:26:35 +0200 The bug is probably a dupl