From owner-freebsd-net Mon Jun 3 8:18:43 2002 Delivered-To: freebsd-net@freebsd.org Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by hub.freebsd.org (Postfix) with ESMTP id 2B94637B405 for ; Mon, 3 Jun 2002 08:18:33 -0700 (PDT) Received: from isi.edu (0b511af5bfcp2mg0@hbo.isi.edu [128.9.160.75]) by boreas.isi.edu (8.11.6/8.11.2) with ESMTP id g53FIUW17980; Mon, 3 Jun 2002 08:18:31 -0700 (PDT) Message-ID: <3CFB88C6.4070407@isi.edu> Date: Mon, 03 Jun 2002 08:18:30 -0700 From: Lars Eggert User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.9) Gecko/20020404 X-Accept-Language: en-us, de-de MIME-Version: 1.0 To: Archie Cobbs Cc: net@FreeBSD.ORG Subject: Re: netgraph documentation? References: <200205312337.g4VNbbs03438@arch20m.dellroad.org> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms020902030009000302070801" Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a cryptographically signed message in MIME format. --------------ms020902030009000302070801 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Archie Cobbs wrote: >>/usr/sbin/ngctl mkpeer iface dummy inet >>/usr/sbin/ngctl mkpeer ng3: ksocket inet inet/stream/tcp >>/usr/sbin/ngctl msg ng3:inet bind inet/10.0.0.1:50505 >>/usr/sbin/ngctl msg ng3:inet listen 1 >>ngctl: send msg: Operation not supported by device >> >> 2. Why can't I listen on a ksocket? > > What you are doing is correct, I don't know why you are getting > that error. The error is coming from solisten(). > > However, when I try this the listen operation does actually > succeed as witnessed by 'netstat -na -f inet'. You're right, I see: [root@hbo: ~larse] netstat -na -f inet Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 0 127.0.0.1.50505 *.* LISTEN So I ignore the error for now, and make the TCP tunnel as follows: Server: /usr/sbin/ngctl mkpeer iface dummy inet /sbin/ifconfig ng0 10.10.10.1 10.10.10.2 /usr/sbin/ngctl mkpeer ng0: ksocket inet inet/stream/tcp /usr/sbin/ngctl msg ng0:inet bind inet/127.0.0.1:50505 /usr/sbin/ngctl msg ng0:inet listen 1 ngctl: send msg: Operation not supported by device Client: /usr/sbin/ngctl mkpeer iface dummy inet /sbin/ifconfig ng1 10.10.10.2 10.10.10.1 /usr/sbin/ngctl mkpeer ng1: ksocket inet inet/stream/tcp /usr/sbin/ngctl msg ng1:inet bind inet/127.0.0.1:50506 /usr/sbin/ngctl msg ng1:inet connect inet/127.0.0.1:50505 ngctl: send msg: Operation now in progress A tcpdump on lo0 shows the 3-way handshake suceeding: [root@hbo: ~larse] tcpdump -i lo0 port 50505 tcpdump: listening on lo0 08:11:29.013658 loopback.50506 > loopback.50505: S 2787661608:2787661608(0) win 65535 (DF) 08:11:29.013710 loopback.50505 > loopback.50506: S 1751674938:1751674938(0) ack 2787661609 win 65535 08:11:29.013754 loopback.50506 > loopback.50505: . ack 1 win 32767 (DF) Pinging 10.10.10.2 results in: [root@hbo: ~larse] ping 10.10.10.2 PING 10.10.10.2 (10.10.10.2): 56 data bytes ping: sendto: Socket is not connected ping: sendto: Socket is not connected ping: sendto: Socket is not connected ^C --- 10.10.10.2 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss A tcpdump on lo0 shows no packets. Pinging 10.10.10.1 results in: [root@hbo: ~larse] ping 10.10.10.1 PING 10.10.10.1 (10.10.10.1): 56 data bytes ^C --- 10.10.10.1 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss This is captures by tcpdump on lo0: [root@hbo: ~larse] tcpdump -i lo0 port 50505 tcpdump: listening on lo0 08:15:21.228886 loopback.50506 > loopback.50505: P 2787661609:2787661693(84) ack 1751674939 win 32767 (DF) 08:15:21.323163 loopback.50505 > loopback.50506: . ack 84 win 32725 (DF) 08:15:22.233135 loopback.50506 > loopback.50505: P 84:168(84) ack 1 win 32767 (DF) 08:15:22.333089 loopback.50505 > loopback.50506: . ack 168 win 32683 (DF) 08:15:23.243144 loopback.50506 > loopback.50505: P 168:252(84) ack 1 win 32767 (DF) 08:15:23.343084 loopback.50505 > loopback.50506: . ack 252 win 32641 (DF) I don't know enough about the netgraph internals to debug this further myself, but I'd be more than happy to do any tests that'd help you or someone else look into this. (I should probably mention that I'm using 4.5-RELEASE.) Thanks, Lars -- Lars Eggert USC Information Sciences Institute --------------ms020902030009000302070801 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIIrjCC ArUwggIeoAMCAQICAwWBRzANBgkqhkiG9w0BAQIFADCBkjELMAkGA1UEBhMCWkExFTATBgNV BAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUx HTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVl bWFpbCBSU0EgMjAwMC44LjMwMB4XDTAxMDgyNDE2NDAwMFoXDTAyMDgyNDE2NDAwMFowVDEP MA0GA1UEBBMGRWdnZXJ0MQ0wCwYDVQQqEwRMYXJzMRQwEgYDVQQDEwtMYXJzIEVnZ2VydDEc MBoGCSqGSIb3DQEJARYNbGFyc2VAaXNpLmVkdTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC gYEA0AvLBsD78nxcUHeHkaMgl3b4qYPnfgbf8Lh+HQP8RgGMRG/Yb+vTpkGezlwt9pkJxiD1 1uZDy4CNNJUu3gKxKSb+zRV70O+lkwwftuHoLHoH4xwo3LcQ2LGDpd+I95tUN4dfJ3TmeEcU SF50dC/SuUI4w8AlhXQ8IxrhgdayTpECAwEAAaNWMFQwKgYFK2UBBAEEITAfAgEAMBowGAIB BAQTTDJ1TXlmZkJOVWJOSkpjZFoyczAYBgNVHREEETAPgQ1sYXJzZUBpc2kuZWR1MAwGA1Ud EwEB/wQCMAAwDQYJKoZIhvcNAQECBQADgYEAheZhn0pQA8zI7U2K1ZIAl11j0a1DKxnp3GtT vOUrGRB3WvYxidvdZ1kizhEsWeXU81TkNDH0DaRqtOEeu6Q2OhB+jeKEqY7IDAJE4/fI0e+d 6PnG1hd+vEvYmsKHkmzBhPc94XUOKNWO+qVNP2NGyNI3QIDy5wX4fdcOo1S34r4wggK1MIIC HqADAgECAgMFgUcwDQYJKoZIhvcNAQECBQAwgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxX ZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYD VQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwg UlNBIDIwMDAuOC4zMDAeFw0wMTA4MjQxNjQwMDBaFw0wMjA4MjQxNjQwMDBaMFQxDzANBgNV BAQTBkVnZ2VydDENMAsGA1UEKhMETGFyczEUMBIGA1UEAxMLTGFycyBFZ2dlcnQxHDAaBgkq hkiG9w0BCQEWDWxhcnNlQGlzaS5lZHUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANAL ywbA+/J8XFB3h5GjIJd2+KmD534G3/C4fh0D/EYBjERv2G/r06ZBns5cLfaZCcYg9dbmQ8uA jTSVLt4CsSkm/s0Ve9DvpZMMH7bh6Cx6B+McKNy3ENixg6XfiPebVDeHXyd05nhHFEhedHQv 0rlCOMPAJYV0PCMa4YHWsk6RAgMBAAGjVjBUMCoGBStlAQQBBCEwHwIBADAaMBgCAQQEE0wy dU15ZmZCTlViTkpKY2RaMnMwGAYDVR0RBBEwD4ENbGFyc2VAaXNpLmVkdTAMBgNVHRMBAf8E AjAAMA0GCSqGSIb3DQEBAgUAA4GBAIXmYZ9KUAPMyO1NitWSAJddY9GtQysZ6dxrU7zlKxkQ d1r2MYnb3WdZIs4RLFnl1PNU5DQx9A2karThHrukNjoQfo3ihKmOyAwCROP3yNHvnej5xtYX frxL2JrCh5JswYT3PeF1DijVjvqlTT9jRsjSN0CA8ucF+H3XDqNUt+K+MIIDODCCAqGgAwIB AgIQZkVyt8x09c9jdkWE0C6RATANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTAT BgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3 dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lv bjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkB FhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAwMDgzMDAwMDAwMFoXDTA0MDgy NzIzNTk1OVowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNV BAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBT ZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMDCBnzAN BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3jMypmPHCSVFPtJueCdngcXaiBmClw7jRCmKYzUq bXA8+tyu9+50bzC8M5B/+TRxoKNtmPHDT6Jl2w36S/HW3WGl+YXNVZo1Gp2Sdagnrthy+boC 9tewkd4c6avgGAOofENCUFGHgzzwObSbVIoTh/+zm51JZgAtCYnslGvpoWkCAwEAAaNOMEww KQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDEtMjk3MBIGA1UdEwEB/wQI MAYBAf8CAQAwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBAUAA4GBADGxS0dd+QFx5fVTbF15 1j2YwCYTYoEipxL4IpXoG0m3J3sEObr85vIk65H6vewNKjj3UFWobPcNrUwbvAP0teuiR59s ogxYjTFCCRFssBpp0SsSskBdavl50OouJd2K5PzbDR+dAvNa28o89kTqJmmHf0iezqWf54TY yWJirQXGMYICpjCCAqICAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJu IENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRD ZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIw MDAuOC4zMAIDBYFHMAkGBSsOAwIaBQCgggFhMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw HAYJKoZIhvcNAQkFMQ8XDTAyMDYwMzE1MTgzMFowIwYJKoZIhvcNAQkEMRYEFHNquFsg00vO 09Jb1g92KT5tJHF6MFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwIC AgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGtBgsqhkiG9w0B CRACCzGBnaCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAG A1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRl IFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwAgMF gUcwDQYJKoZIhvcNAQEBBQAEgYAyqNlcUZ7PEua5wMrG2DZ7iZjzcUzCDlRA+a5l5jW/Ql+m xTdwc4pyh2smCAQHlwuZIdAE705pwLbKJpbVX57ApDOCw4Qp+pTlWGrybvOP9nJ2kP/U9ovR sB2SZCci5CQnhEHgwEqFAf+dwi2EP3AxaN5dstyx/QNdIxDtBca5ygAAAAAAAA== --------------ms020902030009000302070801-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message