From owner-freebsd-net  Thu Feb  1 15:12:36 2001
Delivered-To: freebsd-net@freebsd.org
Received: from amc.isi.edu (amc.isi.edu [128.9.160.102])
	by hub.freebsd.org (Postfix) with ESMTP id 6326D37B491
	for <freebsd-net@freebsd.org>; Thu,  1 Feb 2001 15:12:18 -0800 (PST)
Received: from localhost (yushunwa@localhost)
	by amc.isi.edu (8.11.1/8.11.1) with ESMTP id f11NBit01177;
	Thu, 1 Feb 2001 15:11:45 -0800 (PST)
	(envelope-from yushunwa@amc.isi.edu)
Date: Thu, 1 Feb 2001 15:11:44 -0800 (PST)
From: Yu-Shun Wang <yushunwa@isi.edu>
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
Cc: <freebsd-net@freebsd.org>
Subject: Re: IPComp question 
In-Reply-To: <20010201051101.F26147E56@starfruit.itojun.org>
Message-ID: <Pine.BSF.4.31.0102011458180.1012-100000@amc.isi.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi,

	It turned out that the problem is in netinet/in_proto.c.
	(It might have been fixed in -stable long ago, but not
	in 4.2 release. :-)

	yushun.


--- /usr/src/sys/netinet/in_proto.c     Thu Feb  1 14:56:45 2001
+++ /usr/src/sys/netinet/in_proto.c.ORIG        Thu Feb  1 14:38:25 2001
@@ -72,7 +72,6 @@
 #ifdef IPSEC
 #include <netinet6/ipsec.h>
 #include <netinet6/ah.h>
-#include <netinet6/ipcomp.h>
 #ifdef IPSEC_ESP
 #include <netinet6/esp.h>
 #endif
@@ -149,12 +148,6 @@
   ah4_input,   0,              0,              0,
   0,
   0,           0,              0,              0,
-  &nousrreqs
-},
-{ SOCK_RAW,    &inetdomain,    IPPROTO_IPCOMP, PR_ATOMIC|PR_ADDR,
-  ipcomp4_input,0,              0,              0,
-  0,
-  0,            0,              0,              0,
   &nousrreqs
 },
 #ifdef IPSEC_ESP


____________________________________________________________________________
Yu-Shun Wang <yushunwa@isi.edu>               Information Sciences Institute
                                           University of Southern California

On Thu, 1 Feb 2001, Jun-ichiro itojun Hagino wrote:

>
> >	No, but the problem is that there was no increase (actually, no
> >	record at all) under ipsec: IPComp. The number on the sending
> >	side seemed right. The increase matched the ones I saw from
> >	tcpdump. It looked like the IPComp packets either weren't
> >	logged or were dropped for some reason.
>
> 	send the following items.
> 	- full tcpdump output
> 	- netstat -sn before, and after the test (on both ends)
> 	- full SA configuration on both sides (previous email may have included
> 	  it)
> 	- ifconfig -a output, on both ends
> 	- netstat -rn output, on both ends
> 	- simple network diagram (like intermediate routers) between both ends
>
> itojun
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message