From owner-freebsd-security Thu Jul 22 20: 7: 7 1999 Delivered-To: freebsd-security@freebsd.org Received: from lily.ezo.net (lily.ezo.net [206.102.130.13]) by hub.freebsd.org (Postfix) with ESMTP id A762614FC8 for ; Thu, 22 Jul 1999 20:07:01 -0700 (PDT) (envelope-from jflowers@ezo.net) Received: from lily.ezo.net (jflowers@localhost.ezo.net [127.0.0.1]) by lily.ezo.net (8.8.7/8.8.7) with SMTP id XAA15345; Thu, 22 Jul 1999 23:05:39 -0400 (EDT) Date: Thu, 22 Jul 1999 23:05:39 -0400 (EDT) From: Jim Flowers To: Bill Paul Cc: skip-info@skip-vpn.org, freebsd-security@freebsd.org Subject: Re: wi driver with SKIP In-Reply-To: <199907222036.QAA27461@startide.ctr.columbia.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org OK, you win. Would take me that long to find my sniffer, anyway. The driver installs by pccardd at startup and at that time returns 806 for the value of Ether type. That's before the skip driver is loaded. It also returns 800 for each IP packet and 806 for each arp packet with the skip module turned off and 800 for each IP packet with the skip module turned on. Tcpdump verifies that the SKIP packets are IP protocol 57. Jim Flowers #4 ISP on C|NET, #1 in Ohio On Thu, 22 Jul 1999, Bill Paul wrote: > > No. You should try hacking the driver first, because it would take you > a very short amount of time and it would satisfy my burning curiosity. > You could even attempt to prove or disprove my theory by adding a single > printf() in wi_start() which prints the ethertype field out so that you > can see what it thinks it is. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message