From owner-freebsd-questions@FreeBSD.ORG Sun Jun 29 00:27:24 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C298537B401 for ; Sun, 29 Jun 2003 00:27:24 -0700 (PDT) Received: from kumprang.or.id (kumprang.or.id [202.143.103.227]) by mx1.FreeBSD.org (Postfix) with SMTP id D913343FD7 for ; Sun, 29 Jun 2003 00:27:20 -0700 (PDT) (envelope-from budsz@kumprang.or.id) Received: (qmail 20630 invoked by uid 1008); 29 Jun 2003 07:33:11 -0000 Date: Sun, 29 Jun 2003 14:33:09 +0700 From: budsz To: Bill Moran Message-ID: <20030629073309.GA19024@kumprang.or.id> References: <20030628175128.GA4404@kumprang.or.id> <3EFDE02C.5010003@potentialtech.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3EFDE02C.5010003@potentialtech.com> X-URL: "http://www.kumprang.or.id/~budsz/" X-URL-GPG: "http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x62695304" X-Pubkey: "http://www.kumprang.or.id/~budsz/pubkey.txt" X-Pubkey-MD5: "http://www.kumprang.or.id/~budsz/pubkey-checksum.md5" X-Finger-Print: "A05A 268C 3CD4 ABBD D9EB 11E1 F64C 4B4E 6269 5304" X-Organization: "Internet Cafe and Game PC Kumprang" User-Agent: Mutt/1.5.4i X-Virus-Scanned: by AMaViS perl-11 cc: FreeBSD-Questions Subject: Re: What's this mean? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Jun 2003 07:27:25 -0000 On Sat, Jun 28, 2003 at 02:36:28PM -0400, Bill Moran wrote: >in_chksum is a routine that validates the checksum of recieved network data. >As far as I can tell from the code, that error means that the packet of data >was three bytes shorter than it should have been. One way or the other it's >a network problem. Could be crappy NIC or other hardware. Could be some >sort >of attack using invalid packets. I'm not familiar enough with that corner >of >the code to say for sure. >Is this happening frequently? If you only saw the message once, you can >probably ignore it as a network glitch, but if it's showing up often, you'd >do well to track down the source and fix it. Thanks Bill for explanation. I assume if I under attack with invalid packet of data maybe you've any advice to prevent this problem?. -- budsz