From owner-freebsd-questions Mon Jun 25 13:59:37 2001 Delivered-To: freebsd-questions@freebsd.org Received: from sec-tools.corp.globalstar.com (gibraltar.globalstar.com [207.88.248.142]) by hub.freebsd.org (Postfix) with ESMTP id 9A45237B42C for ; Mon, 25 Jun 2001 13:59:26 -0700 (PDT) (envelope-from cclark@globalstar.com) Received: (from cclark@localhost) by sec-tools.corp.globalstar.com (8.11.3/8.11.3) id f5PKxQh20329 for freebsd-questions@freebsd.org; Mon, 25 Jun 2001 13:59:26 -0700 (PDT) (envelope-from cclark) Date: Mon, 25 Jun 2001 13:16:16 -0700 From: "Crist J. Clark" To: diman Cc: cjclark@alum.mit.edu Subject: Re: hping2 Headaches Message-ID: <20010625131616.A19866@sec-tools.corp.globalstar.com> References: <20010624224817.L11961@blossom.cjclark.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from diman@asd-g.com on Mon, Jun 25, 2001 at 03:07:44PM +0000 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jun 25, 2001 at 03:07:44PM +0000, diman wrote: [snip] > Sounds strange. I can't reproduce such an effect > with hping2-54 (from sourceforge.net) on 4.1.1R box, > having kernel compiled without IPFIREWALL. This is -STABLE from a CVS update Saturday afternoon. Did you try it over a ppp(8)/tun(4) device? As I mentioned, it did work fine over an Ethernet interface. I only had problems on the dial-up link. To be honest, I'm a bit wary of tcpdump(8) (or maybe its pcap(3)). I've previously seen weirdness using it on a tun(4) interface. FYI, I do not have IPFIREWALL enabled on the device. However, it _does_ have IPFILTER. I don't see how that would interfere, but it is definately in the realm of possibility. I'll try 'ipf -D' and see if I get the same results, and then perhaps recompile without it. -- Crist J. Clark Network Security Engineer crist.clark@globalstar.com Globalstar, L.P. (408) 933-4387 FAX: (408) 933-4926 The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact postmaster@globalstar.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message