From owner-freebsd-net@FreeBSD.ORG Thu Apr 4 11:24:28 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 24287728 for ; Thu, 4 Apr 2013 11:24:28 +0000 (UTC) (envelope-from lars@netapp.com) Received: from mx12.netapp.com (mx12.netapp.com [216.240.18.77]) by mx1.freebsd.org (Postfix) with ESMTP id 0DB2F81B for ; Thu, 4 Apr 2013 11:24:25 +0000 (UTC) X-IronPort-AV: E=Sophos;i="4.87,408,1363158000"; d="scan'208";a="37012270" Received: from smtp2.corp.netapp.com ([10.57.159.114]) by mx12-out.netapp.com with ESMTP; 04 Apr 2013 04:24:19 -0700 Received: from vmwexceht05-prd.hq.netapp.com (exchsmtp.hq.netapp.com [10.106.77.35]) by smtp2.corp.netapp.com (8.13.1/8.13.1/NTAP-1.6) with ESMTP id r34BOJPD002176 for ; Thu, 4 Apr 2013 04:24:19 -0700 (PDT) Received: from SACEXCMBX01-PRD.hq.netapp.com ([169.254.2.218]) by vmwexceht05-prd.hq.netapp.com ([10.106.77.35]) with mapi id 14.02.0342.003; Thu, 4 Apr 2013 04:24:19 -0700 From: "Eggert, Lars" To: "freebsd-net@freebsd.org" Subject: enable tcpdump GUESS_TSO flag? Thread-Topic: enable tcpdump GUESS_TSO flag? Thread-Index: AQHOMSbyh8pfApUoREqP7JnSG2Yuog== Date: Thu, 4 Apr 2013 11:24:18 +0000 Message-ID: <0A5ED929-C148-45C3-8576-C31D2C05AB04@netapp.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.106.53.51] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2013 11:24:28 -0000 Hi, I wonder whether it'd be a good idea to enable tcpdump's GUESS_TSO flag by = default? It enables a heuristic that lets tcpdump understand pcaps that inc= lude segments generated by TCP TSO (which otherwise show up as "IP bad-len = 0".) See the dicussion at http://www.mail-archive.com/tcpdump-workers@lists.tcpd= ump.org/msg01051.html for details. Lars diff --git a/usr.sbin/tcpdump/tcpdump/Makefile b/usr.sbin/tcpdump/tcpdump/M= akefile index ca8ec4c..5fd73a1 100644 --- a/usr.sbin/tcpdump/tcpdump/Makefile +++ b/usr.sbin/tcpdump/tcpdump/Makefile @@ -45,6 +45,10 @@ CFLAGS+=3D -I${.CURDIR} -I${TCPDUMP_DISTDIR} CFLAGS+=3D -DHAVE_CONFIG_H CFLAGS+=3D -D_U_=3D"__attribute__((unused))" =20 +# Enable tcpdump heuristic to identify TSO-generated packets; see +# http://www.mail-archive.com/tcpdump-workers@lists.tcpdump.org/msg01051.h= tml +CFLAGS+=3D -DGUESS_TSO + .if ${MK_INET6_SUPPORT} !=3D "no" SRCS+=3D print-ip6.c print-ip6opts.c print-mobility.c print-ripng.c \ print-icmp6.c print-babel.c print-frag6.c print-rt6.c print-ospf6.c \