Date: Sun, 7 Jul 2002 11:31:26 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Irwan Hadi <irwanhadi@phxby.engr.usu.edu> Cc: questions@FreeBSD.ORG Subject: Re: pullup failed Message-ID: <20020707103126.GB20900@happy-idiot-talk.infracaninophi> In-Reply-To: <20020707044255.GA3260@phxby.com> References: <20020707044255.GA3260@phxby.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jul 06, 2002 at 10:42:55PM -0600, Irwan Hadi wrote: > pullup failed ipfw(8) man page: FINE POINTS =B7 There are circumstances where fragmented datagrams are unconditi= on=AD ally dropped. TCP packets are dropped if they do not contain at least 20 bytes of TCP header, UDP packets are dropped if they do n= ot contain a full 8 byte UDP header, and ICMP packets are dropped if they do not contain 4 bytes of ICMP header, enough to specify the ICMP type, code, and checksum. These packets are simply logged as ``pullup failed'' since there may not be enough good data in the packet to produce a meaningful log entry. Fragmented packets like that are probably due to broken hardware on your network, although they can be the result of enemy action. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Tel: +44 1628 476614 Marlow Fax: +44 0870 0522645 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020707103126.GB20900>