From owner-freebsd-questions Sun Jul 7 3:31:39 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3000237B400 for ; Sun, 7 Jul 2002 03:31:34 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4FAC843E4A for ; Sun, 7 Jul 2002 03:31:33 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.5/8.12.5) with ESMTP id g67AVWYn021154; Sun, 7 Jul 2002 11:31:32 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.5/8.12.5/Submit) id g67AVRWQ021153; Sun, 7 Jul 2002 11:31:27 +0100 (BST) Date: Sun, 7 Jul 2002 11:31:26 +0100 From: Matthew Seaman To: Irwan Hadi Cc: questions@FreeBSD.ORG Subject: Re: pullup failed Message-ID: <20020707103126.GB20900@happy-idiot-talk.infracaninophi> References: <20020707044255.GA3260@phxby.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <20020707044255.GA3260@phxby.com> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Jul 06, 2002 at 10:42:55PM -0600, Irwan Hadi wrote: > pullup failed ipfw(8) man page: FINE POINTS =B7 There are circumstances where fragmented datagrams are unconditi= on=AD ally dropped. TCP packets are dropped if they do not contain at least 20 bytes of TCP header, UDP packets are dropped if they do n= ot contain a full 8 byte UDP header, and ICMP packets are dropped if they do not contain 4 bytes of ICMP header, enough to specify the ICMP type, code, and checksum. These packets are simply logged as ``pullup failed'' since there may not be enough good data in the packet to produce a meaningful log entry. Fragmented packets like that are probably due to broken hardware on your network, although they can be the result of enemy action. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Tel: +44 1628 476614 Marlow Fax: +44 0870 0522645 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message