From owner-freebsd-net@FreeBSD.ORG  Wed Apr  2 15:08:31 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C94FA1065741
	for <freebsd-net@freebsd.org>; Wed,  2 Apr 2008 15:08:31 +0000 (UTC)
	(envelope-from freebsd-net@m.gmane.org)
Received: from ciao.gmane.org (main.gmane.org [80.91.229.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 81E1E8FC1A
	for <freebsd-net@freebsd.org>; Wed,  2 Apr 2008 15:08:31 +0000 (UTC)
	(envelope-from freebsd-net@m.gmane.org)
Received: from list by ciao.gmane.org with local (Exim 4.43)
	id 1Jh4Zg-0000cQ-C5
	for freebsd-net@freebsd.org; Wed, 02 Apr 2008 15:08:28 +0000
Received: from mulderlab.f5.com ([205.229.151.151])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-net@freebsd.org>; Wed, 02 Apr 2008 15:08:28 +0000
Received: from atkin901 by mulderlab.f5.com with local (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-net@freebsd.org>; Wed, 02 Apr 2008 15:08:28 +0000
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-net@freebsd.org
From: Mark Atkinson <atkin901@yahoo.com>
Date: Wed, 02 Apr 2008 08:08:18 -0700
Lines: 25
Message-ID: <ft07h2$ukj$1@ger.gmane.org>
References: <fstmm9$oci$1@ger.gmane.org>
	<20080401191246.GA1491@fnop.net>	<fsu2c6$6iv$1@ger.gmane.org>
	<47F29471.10901@freebsd.org> <47F29DE0.6080500@freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: mulderlab.f5.com
User-Agent: KNode/0.10.5
Sender: news <news@ger.gmane.org>
Subject: Re: panic: tcp_addoptions: TCP options too long w/
	with	TCP_SIGNATURE support
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2008 15:08:31 -0000

Andre Oppermann wrote:
> Before:
> 
>    MSS (4) + NOP (1) + Window scale (3) + SACK permitted (2) +
>    Timestamp (10) + Signature (18) = 38 bytes out of a maximum of 40.
> 
> After:
> 
>   MSS (4) + NOP (1) + Window scale (3) + NOP (2) + Timestamp (10) +
>   NOP (2) + Signature (18) + SACK permitted (2) + EOL (1) + PAD (1) =
>   44 bytes out of a maximum of 40.
> 
> With the attached patch it will omit the SACK permitted option (disabling
> SACK) and limiting it to 40 bytes.

Appears to work with patch.

08:06:38.324770 IP 172.16.15.254.41869 > 172.16.1.145.7: S
1106204761:1106204761(0) win 65535 <mss 1460,nop,wscale 3,nop,nop,timestamp
684040 0,nop,nop,md5:valid>

-- 
Mark Atkinson
atkin901@yahoo.com
(!wired)?(coffee++):(wired);