Date: Fri, 22 Apr 2005 14:44:18 -0700 From: Brooks Davis <brooks@one-eyed-alien.net> To: Luigi Rizzo <rizzo@icir.org> Cc: FreeBSD Current <freebsd-current@freebsd.org> Subject: Re: significant increase in ipfw pullup failed Message-ID: <20050422214418.GB11806@odin.ac.hmc.edu> In-Reply-To: <20050422115518.C70611@xorpc.icir.org> References: <17001.9557.627987.505930@roam.psg.com> <fdd333f2fb516561a8ded012141ac28d@mac.com> <17001.16520.774703.612151@roam.psg.com> <20050422112246.A70611@xorpc.icir.org> <17001.16764.512962.411616@roam.psg.com> <20050422115518.C70611@xorpc.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--dc+cDN39EJAMEtIO Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Apr 22, 2005 at 11:55:18AM -0700, Luigi Rizzo wrote: > On Fri, Apr 22, 2005 at 08:25:00AM -1000, Randy Bush wrote: > > > wonder if it is related to the recent import of ipfw v6 support... > >=20 > > could be, no idea really. but fwiw, ipv6 is not enabled here. >=20 > yes but there is some new code in the common path. > anyways i have cc-ed Brooks who committed the code I suspect this is due to over agressive pullups of icmp packets (at least that's the most obvious place where the length changed) which are caused by poor design of the icmp struct. We're pulling up the full length and should instead be pulling up 4 bytes. I'm not sure what the best fix it. Long term, creating a struct icmphdr is probably the right answer. For now, the thing to do may be to add it and use it in ipfw, but not modify struct icmp just yet. -- Brooks -- Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --dc+cDN39EJAMEtIO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFCaXAxXY6L6fI4GtQRAnRaAKCE7ahNWiqco+zHtmSZOOGkXvrfDwCgqwCR b7ySf+Mw6ysvxaK2YuCtIWU= =75ub -----END PGP SIGNATURE----- --dc+cDN39EJAMEtIO--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050422214418.GB11806>