Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Jul 2011 12:34:22 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        sclark46@earthlink.net
Cc:        FreeBSD Stable <freebsd-stable@freebsd.org>
Subject:   Re: UDP Packet reassembly
Message-ID:  <4654E38A-B5EB-4020-BA17-B016F77FDB25@mac.com>
In-Reply-To: <4E31B1ED.1030701@earthlink.net>
References:  <4E31B1ED.1030701@earthlink.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Jul 28, 2011, at 12:01 PM, Stephen Clark wrote:
> Could someone enlighten me as to when FreeBSD 6.3 does UDP packet reassembly?

Packet reassembly is done at the IP layer, not the UDP layer.  Normally, reassembly is performed on the destination host, but routers or firewalls along the path conceivably might also reassemble packets.

> I am having a problem where I am getting a fragmented udp packet (2 pieces) everthing is
> fine if I get the first frag first. but if the second frag comes first then both fragments get dropped.
> 
> I am using ipfilter and a bimap to redirect these packets to a host inside of the FreeBSD box,
> so I suspicion it is ipfilter causing the drops.
> 
> I know, I know 6.3 is ancient history, but any insight would be appreciated.

It's probably the firewall dropping the traffic, yes-- running tcpdump on the firewall versus the destination host would confirm this.  Something like "keep frags" on your pass rules would help if it is ipfilter...

Regards,
-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4654E38A-B5EB-4020-BA17-B016F77FDB25>