Date: Tue, 7 Dec 1999 10:20:27 -0800 (PST) From: Archie Cobbs <archie@whistle.com> To: b39wys@pluto.cpe.ku.ac.th (Witthaya Panichprechakorn) Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: About divert socket Message-ID: <199912071820.KAA99479@bubba.whistle.com> In-Reply-To: <Pine.BSF.4.05.9912070906030.14398-100000@pluto.cpe.ku.ac.th> from Witthaya Panichprechakorn at "Dec 7, 1999 09:32:08 am"
next in thread | previous in thread | raw e-mail | index | archive | help
Witthaya Panichprechakorn writes: > I use divert socket to captuer packets. I found that when > I capture a set of fragmented packets, there are 2 incoming reassembled > packets. The sin_port of sockaddr_in of the first packet is 0, > and of another packet is the port number, which it bound to. > However, when the packet is not fragmented, there is only one incoming > packet with sin_port of sockaddr_in equals to the port number, which it > bound to, similar to the second captured packet when framentation > occured. What is the actual process when a set of fragmented packets is > arrived? Why the system should divert two incoming packets? What version of FreeBSD? -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199912071820.KAA99479>