From owner-freebsd-hackers Mon Dec 6 18:30:40 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from pluto.cpe.ku.ac.th (pluto.cpe.ku.ac.th [158.108.32.150]) by hub.freebsd.org (Postfix) with ESMTP id B18B714BC4 for ; Mon, 6 Dec 1999 18:30:33 -0800 (PST) (envelope-from b39wys@pluto.cpe.ku.ac.th) Received: from localhost (b39wys@localhost) by pluto.cpe.ku.ac.th (8.9.3/8.9.3) with ESMTP id JAA14419 for ; Tue, 7 Dec 1999 09:32:08 GMT Date: Tue, 7 Dec 1999 09:32:08 +0000 (GMT) From: Witthaya Panichprechakorn To: freebsd-hackers@freebsd.org Subject: About divert socket Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Dear Sir, I use divert socket to captuer packets. I found that when I capture a set of fragmented packets, there are 2 incoming reassembled packets. The sin_port of sockaddr_in of the first packet is 0, and of another packet is the port number, which it bound to. However, when the packet is not fragmented, there is only one incoming packet with sin_port of sockaddr_in equals to the port number, which it bound to, similar to the second captured packet when framentation occured. What is the actual process when a set of fragmented packets is arrived? Why the system should divert two incoming packets? Best Regards, Withaya Panichpreechakorn To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message