Date: Wed, 8 Aug 2007 12:04:07 +0300 (EEST) From: Pekka Savola <pekkas@netcore.fi> To: "Andrey V. Elsukov" <bu7cher@yandex.ru> Cc: freebsd-ipfw@freebsd.org Subject: Re: ip6fw byte reporting error in v6 Message-ID: <Pine.LNX.4.64.0708081203270.32486@netcore.fi> In-Reply-To: <46B97769.4010203@yandex.ru> References: <Pine.LNX.4.64.0708071608060.2363@netcore.fi> <46B97769.4010203@yandex.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 8 Aug 2007, Andrey V. Elsukov wrote: > Pekka Savola wrote: >> Fiddling around with ipfw, I noticed that 'ip6fw -ta l', under byte >> reports, does not include the base IPv6 header in the length calculation >> (hmm.. I wonder how it would calculate the length of extension-header >> chained packet). >> >> IPv4 byte statistics, on the other hand, include the IPv4 header bytes. >> >> Is this a known problem? Is it a more general BSD kernel problem? > > Probably, you should use ipfw(8) instead of ip6fw(8). ip6fw was removed and > it's functional moved into ipfw(8). FWIW -- a rule generated by ipfw(8) counts the length correctly. -- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.64.0708081203270.32486>