From owner-freebsd-net Thu Aug 2 6:36: 6 2001 Delivered-To: freebsd-net@freebsd.org Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by hub.freebsd.org (Postfix) with ESMTP id 66D7537B401 for ; Thu, 2 Aug 2001 06:36:01 -0700 (PDT) (envelope-from itojun@itojun.org) Received: from itojun.org (localhost [127.0.0.1]) by coconut.itojun.org (Postfix) with ESMTP id 023F74B21; Thu, 2 Aug 2001 22:35:58 +0900 (JST) To: "Chris" Cc: "freebsd-net@freebsd.org" In-reply-to: mlnn4's message of Thu, 02 Aug 2001 22:36:06 +1000. <200108021237.f72CbKQ00596@aussie.org> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: Re: kernel upgrade causes truncated IPSEC packets From: itojun@iijlab.net Date: Thu, 02 Aug 2001 22:35:58 +0900 Message-ID: <16101.996759358@itojun.org> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >>packet. But the PPP process only sees the first 36 bytes or so of it (for >>example, a packet which arrives as 263 bytes becomes 320 bytes after >>encapsulation. This is what is shown by both tcpdump and the packet header, >>as read from the ppp async stream), but only 36 bytes of it make it through >>to the modem (plus the PPP overhead of about 5 bytes). > >I re-posted this to -stable, and thanks to Bill Fenner it is now fixed. > >It seems that the IPSEC code for some reason will sometimes insert a zero- >length mbuf into the mbuf chain. if_tun.c will cease following the linked >list of mbufs if it sees a zero-length one, thus causing the truncated output >packets. Dunno how long it's been like that (probably 7 weeks) but it would >have affected anyone who used IPSEC over a /dev/tunN device. was the fix committed to sys/net/if_tun.c? i guess other *BSDs have the same issue. itojun To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message