Date: Fri, 12 Jul 2002 15:33:54 -0400 From: "Cambria, Mike" <mcambria@avaya.com> To: "'Andrew R. Reiter'" <arr@watson.org>, "Cambria, Mike" <mcambria@avaya.com> Cc: 'Jonathan Lemon' <jlemon@flugsvamp.com>, "'freebsd-net@freebsd.org'" <freebsd-net@FreeBSD.ORG> Subject: RE: xl checksum and dsniff Message-ID: <3A6D367EA1EFD4118C9B00A0C9DD99D7065A40@rerun.avayactc.com>
next in thread | raw e-mail | index | archive | help
> -----Original Message----- > From: Andrew R. Reiter [mailto:arr@watson.org] > :Next I'll try to track down if this is this a libnet problem, libnids > :problem or dsniff problem, so I know which project I need to inform. > > IIRC, the problem is BPF b/c it doesn't know the checksum since the > calculation was offloaded, no? Possibly, or perhaps libpcap? Now that I know checksum offload is indeed involved, I booted the original kernel and poked around. Using dsniff -c, dsniff was able to see packets received just fine. The half of the session sent is what dsniff can't track. Packets received, although tcpdump shows "bad checksum", are seen by dsniff just fine. I expected it to be the other way around. MikeC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A6D367EA1EFD4118C9B00A0C9DD99D7065A40>