lkml.org 
[lkml]   [1997]   [Jul]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: tcpdump & bad tcp checksum
From
Date
>>>>> "Eric" == Eric Schenk <Eric.Schenk@dna.lth.se> writes:

Eric> "SethMeister G." <shaggy@jade.cs.binghamton.edu> writes:
>> Hi guys,
>>
>> Just wanted to know why, if the kernel says that there was a packet
>> with an invalid tcp checksum, that when I do a tcpdump and grab all
>> the tcp segments, tcpdump does not say that an invalid checksum was
>> found (and yes, I am using -v)...

Eric> tcpdump only grabs the first few bytes of a packet (by default).

Ehhhmmm, tcpdump for Linux tend to grab the full packet rather than
just the header, just checked libpcap-0.4a1 and its still like
that. Yup this is bad, especially for `large' MTU networks such as
FDDI, and I guess we should do something about this at some point.

Jes

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.044 / U:0.344 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site