Date: Mon, 03 Jun 2002 08:18:30 -0700 From: Lars Eggert <larse@ISI.EDU> To: Archie Cobbs <archie@dellroad.org> Cc: net@FreeBSD.ORG Subject: Re: netgraph documentation? Message-ID: <3CFB88C6.4070407@isi.edu> References: <200205312337.g4VNbbs03438@arch20m.dellroad.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is a cryptographically signed message in MIME format.
--------------ms020902030009000302070801
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Archie Cobbs wrote:
>>/usr/sbin/ngctl mkpeer iface dummy inet
>>/usr/sbin/ngctl mkpeer ng3: ksocket inet inet/stream/tcp
>>/usr/sbin/ngctl msg ng3:inet bind inet/10.0.0.1:50505
>>/usr/sbin/ngctl msg ng3:inet listen 1
>>ngctl: send msg: Operation not supported by device
>>
>> 2. Why can't I listen on a ksocket?
>
> What you are doing is correct, I don't know why you are getting
> that error. The error is coming from solisten().
>
> However, when I try this the listen operation does actually
> succeed as witnessed by 'netstat -na -f inet'.
You're right, I see:
[root@hbo: ~larse] netstat -na -f inet
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp4 0 0 127.0.0.1.50505 *.* LISTEN
So I ignore the error for now, and make the TCP tunnel as follows:
Server:
/usr/sbin/ngctl mkpeer iface dummy inet
/sbin/ifconfig ng0 10.10.10.1 10.10.10.2
/usr/sbin/ngctl mkpeer ng0: ksocket inet inet/stream/tcp
/usr/sbin/ngctl msg ng0:inet bind inet/127.0.0.1:50505
/usr/sbin/ngctl msg ng0:inet listen 1
ngctl: send msg: Operation not supported by device
Client:
/usr/sbin/ngctl mkpeer iface dummy inet
/sbin/ifconfig ng1 10.10.10.2 10.10.10.1
/usr/sbin/ngctl mkpeer ng1: ksocket inet inet/stream/tcp
/usr/sbin/ngctl msg ng1:inet bind inet/127.0.0.1:50506
/usr/sbin/ngctl msg ng1:inet connect inet/127.0.0.1:50505
ngctl: send msg: Operation now in progress
A tcpdump on lo0 shows the 3-way handshake suceeding:
[root@hbo: ~larse] tcpdump -i lo0 port 50505
tcpdump: listening on lo0
08:11:29.013658 loopback.50506 > loopback.50505: S
2787661608:2787661608(0) win 65535 <mss 16344,nop,wscale
1,nop,nop,timestamp 14010458 0,nop,nop,cc 383> (DF)
08:11:29.013710 loopback.50505 > loopback.50506: S
1751674938:1751674938(0) ack 2787661609 win 65535 <mss 16344,nop,wscale
1,nop,nop,timestamp 14010458 14010458,nop,nop,cc 384,nop,nop,ccecho 383>
08:11:29.013754 loopback.50506 > loopback.50505: . ack 1 win 32767
<nop,nop,timestamp 14010458 14010458,nop,nop,cc 383> (DF)
Pinging 10.10.10.2 results in:
[root@hbo: ~larse] ping 10.10.10.2
PING 10.10.10.2 (10.10.10.2): 56 data bytes
ping: sendto: Socket is not connected
ping: sendto: Socket is not connected
ping: sendto: Socket is not connected
^C
--- 10.10.10.2 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
A tcpdump on lo0 shows no packets.
Pinging 10.10.10.1 results in:
[root@hbo: ~larse] ping 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes
^C
--- 10.10.10.1 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
This is captures by tcpdump on lo0:
[root@hbo: ~larse] tcpdump -i lo0 port 50505
tcpdump: listening on lo0
08:15:21.228886 loopback.50506 > loopback.50505: P
2787661609:2787661693(84) ack 1751674939 win 32767 <nop,nop,timestamp
14033679 14010458,nop,nop,cc 383> (DF)
08:15:21.323163 loopback.50505 > loopback.50506: . ack 84 win 32725
<nop,nop,timestamp 14033689 14033679,nop,nop,cc 384> (DF)
08:15:22.233135 loopback.50506 > loopback.50505: P 84:168(84) ack 1 win
32767 <nop,nop,timestamp 14033780 14033689,nop,nop,cc 383> (DF)
08:15:22.333089 loopback.50505 > loopback.50506: . ack 168 win 32683
<nop,nop,timestamp 14033790 14033780,nop,nop,cc 384> (DF)
08:15:23.243144 loopback.50506 > loopback.50505: P 168:252(84) ack 1 win
32767 <nop,nop,timestamp 14033881 14033790,nop,nop,cc 383> (DF)
08:15:23.343084 loopback.50505 > loopback.50506: . ack 252 win 32641
<nop,nop,timestamp 14033891 14033881,nop,nop,cc 384> (DF)
I don't know enough about the netgraph internals to debug this further
myself, but I'd be more than happy to do any tests that'd help you or
someone else look into this. (I should probably mention that I'm using
4.5-RELEASE.)
Thanks,
Lars
--
Lars Eggert <larse@isi.edu> USC Information Sciences Institute
--------------ms020902030009000302070801
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIIrjCC
ArUwggIeoAMCAQICAwWBRzANBgkqhkiG9w0BAQIFADCBkjELMAkGA1UEBhMCWkExFTATBgNV
BAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUx
HTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVl
bWFpbCBSU0EgMjAwMC44LjMwMB4XDTAxMDgyNDE2NDAwMFoXDTAyMDgyNDE2NDAwMFowVDEP
MA0GA1UEBBMGRWdnZXJ0MQ0wCwYDVQQqEwRMYXJzMRQwEgYDVQQDEwtMYXJzIEVnZ2VydDEc
MBoGCSqGSIb3DQEJARYNbGFyc2VAaXNpLmVkdTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC
gYEA0AvLBsD78nxcUHeHkaMgl3b4qYPnfgbf8Lh+HQP8RgGMRG/Yb+vTpkGezlwt9pkJxiD1
1uZDy4CNNJUu3gKxKSb+zRV70O+lkwwftuHoLHoH4xwo3LcQ2LGDpd+I95tUN4dfJ3TmeEcU
SF50dC/SuUI4w8AlhXQ8IxrhgdayTpECAwEAAaNWMFQwKgYFK2UBBAEEITAfAgEAMBowGAIB
BAQTTDJ1TXlmZkJOVWJOSkpjZFoyczAYBgNVHREEETAPgQ1sYXJzZUBpc2kuZWR1MAwGA1Ud
EwEB/wQCMAAwDQYJKoZIhvcNAQECBQADgYEAheZhn0pQA8zI7U2K1ZIAl11j0a1DKxnp3GtT
vOUrGRB3WvYxidvdZ1kizhEsWeXU81TkNDH0DaRqtOEeu6Q2OhB+jeKEqY7IDAJE4/fI0e+d
6PnG1hd+vEvYmsKHkmzBhPc94XUOKNWO+qVNP2NGyNI3QIDy5wX4fdcOo1S34r4wggK1MIIC
HqADAgECAgMFgUcwDQYJKoZIhvcNAQECBQAwgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxX
ZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYD
VQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwg
UlNBIDIwMDAuOC4zMDAeFw0wMTA4MjQxNjQwMDBaFw0wMjA4MjQxNjQwMDBaMFQxDzANBgNV
BAQTBkVnZ2VydDENMAsGA1UEKhMETGFyczEUMBIGA1UEAxMLTGFycyBFZ2dlcnQxHDAaBgkq
hkiG9w0BCQEWDWxhcnNlQGlzaS5lZHUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANAL
ywbA+/J8XFB3h5GjIJd2+KmD534G3/C4fh0D/EYBjERv2G/r06ZBns5cLfaZCcYg9dbmQ8uA
jTSVLt4CsSkm/s0Ve9DvpZMMH7bh6Cx6B+McKNy3ENixg6XfiPebVDeHXyd05nhHFEhedHQv
0rlCOMPAJYV0PCMa4YHWsk6RAgMBAAGjVjBUMCoGBStlAQQBBCEwHwIBADAaMBgCAQQEE0wy
dU15ZmZCTlViTkpKY2RaMnMwGAYDVR0RBBEwD4ENbGFyc2VAaXNpLmVkdTAMBgNVHRMBAf8E
AjAAMA0GCSqGSIb3DQEBAgUAA4GBAIXmYZ9KUAPMyO1NitWSAJddY9GtQysZ6dxrU7zlKxkQ
d1r2MYnb3WdZIs4RLFnl1PNU5DQx9A2karThHrukNjoQfo3ihKmOyAwCROP3yNHvnej5xtYX
frxL2JrCh5JswYT3PeF1DijVjvqlTT9jRsjSN0CA8ucF+H3XDqNUt+K+MIIDODCCAqGgAwIB
AgIQZkVyt8x09c9jdkWE0C6RATANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTAT
BgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3
dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lv
bjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkB
FhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAwMDgzMDAwMDAwMFoXDTA0MDgy
NzIzNTk1OVowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNV
BAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBT
ZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMDCBnzAN
BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3jMypmPHCSVFPtJueCdngcXaiBmClw7jRCmKYzUq
bXA8+tyu9+50bzC8M5B/+TRxoKNtmPHDT6Jl2w36S/HW3WGl+YXNVZo1Gp2Sdagnrthy+boC
9tewkd4c6avgGAOofENCUFGHgzzwObSbVIoTh/+zm51JZgAtCYnslGvpoWkCAwEAAaNOMEww
KQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDEtMjk3MBIGA1UdEwEB/wQI
MAYBAf8CAQAwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBAUAA4GBADGxS0dd+QFx5fVTbF15
1j2YwCYTYoEipxL4IpXoG0m3J3sEObr85vIk65H6vewNKjj3UFWobPcNrUwbvAP0teuiR59s
ogxYjTFCCRFssBpp0SsSskBdavl50OouJd2K5PzbDR+dAvNa28o89kTqJmmHf0iezqWf54TY
yWJirQXGMYICpjCCAqICAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJu
IENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRD
ZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIw
MDAuOC4zMAIDBYFHMAkGBSsOAwIaBQCgggFhMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw
HAYJKoZIhvcNAQkFMQ8XDTAyMDYwMzE1MTgzMFowIwYJKoZIhvcNAQkEMRYEFHNquFsg00vO
09Jb1g92KT5tJHF6MFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwIC
AgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGtBgsqhkiG9w0B
CRACCzGBnaCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAG
A1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRl
IFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwAgMF
gUcwDQYJKoZIhvcNAQEBBQAEgYAyqNlcUZ7PEua5wMrG2DZ7iZjzcUzCDlRA+a5l5jW/Ql+m
xTdwc4pyh2smCAQHlwuZIdAE705pwLbKJpbVX57ApDOCw4Qp+pTlWGrybvOP9nJ2kP/U9ovR
sB2SZCci5CQnhEHgwEqFAf+dwi2EP3AxaN5dstyx/QNdIxDtBca5ygAAAAAAAA==
--------------ms020902030009000302070801--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3CFB88C6.4070407>