lkml.org 
[lkml]   [1998]   [Jan]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectBug in Linux networking code

[ Sent to: linux-kernel@vger.rutgers.edu, and slice@castlenet.org
(admin of the host where I discovered the bug). If the
first address is incorrect, please forward it to the
relevant maintainers/mailinglist. Thanks ]

Hi,

it seems like a have found a bug in the linux networking code:
occasionally, it will set the DF (don't fragment) bit instead of the
MF (more fragments) bit in the first fragment of a TCP segment (looks
like a typo somewhere). I'm not sure under which circumstances this
bug shows up.

The bug was discovered when connecting to the irc server on
Cumulus.CO.CastleNet.Org (while transmitting the welcome message). I
will include two packet-dumps, where the first one shows the bug,
while the second does not (I don't know why this happens only
occasionally).

The machine in question identifies itself as
Red Hat Linux release 4.2 (Biltmore)
Kernel 2.0.32 on an i586

As I don't use Linux myself, I can't check whether this is fixed in
later versions of the kernel.

First packet dump, which shows the bug (captured with IP Filter on a
NetBSD 1.3 machine. I added some comments next to the hexdump, and
marked the byte in question as *40* (DF=1, MF=0). Sorry for the huge
lines). The fragment following the buggy one would normally be caught
and blocked by IP Filter, because the first fragment does not indicate
that more fragments will follow (this is how I noticed the problem).

---------------------- begin first packet dump ---------------------
20/01/1998 20:54:11.586435 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 60 -S
45 00 3c 00 40 5e 00 00 40 06 00 28 c2 5e fe 86 E.<.@^..@..(.^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 0f 00 00 00 00 .-......0.......
a0 02 40 00 a0 1f 00 00 02 04 05 b4 01 03 03 00 ..@.............
01 01 08 0a 00 06 40 1e 00 00 00 00 ......@.....
20/01/1998 20:54:12.035465 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 44 -AS
45 00 2c 00 3a 48 00 00 2e 06 00 00 c7 2d 96 0d E.,.:H.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 7a 62 30 f3 b8 10 .^........zb0...
60 12 7f e0 95 0d 00 00 02 04 02 0a `...........
20/01/1998 20:54:12.035600 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 63 00 00 40 06 00 14 c2 5e fe 86 E.(.@c..@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 10 e1 aa 7a 63 .-......0.....zc
50 10 44 70 e4 90 00 00 P.Dp....
20/01/1998 20:54:12.036082 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 53 -AP
45 00 35 00 40 64 00 00 40 06 00 21 c2 5e fe 86 E.5.@d..@..!.^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 10 e1 aa 7a 63 .-......0.....zc
50 18 44 70 e5 1d 00 00 4e 49 43 4b 20 74 65 73 P.Dp....NICK tes
74 67 69 7a 0a tgiz.
20/01/1998 20:54:12.529537 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A
45 00 28 00 3c 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.<H.@.....-..
c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 1d .^........zc0...
50 10 7f d3 a9 20 00 00 P.... ..
20/01/1998 20:54:12.529655 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 103 -AP
45 00 67 00 40 66 00 00 40 06 00 53 c2 5e fe 86 E.g.@f..@..S.^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 1d e1 aa 7a 63 .-......0.....zc
50 18 44 70 fe 03 00 00 55 53 45 52 20 67 69 7a P.Dp....USER giz
6d 6f 20 7a 6f 72 6b 2e 6e 6f 72 74 68 2e 64 65 mo zork.north.de
20 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 Cumulus.CO.Cast
6c 65 4e 65 74 2e 4f 72 67 20 3a 4b 6c 61 75 73 leNet.Org :Klaus
20 57 65 62 65 72 0a Weber.
20/01/1998 20:54:12.988711 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A
45 00 28 00 40 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.@H.@.....-..
c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 5c .^........zc0..\
50 10 7f 94 a9 20 00 00 P.... ..
20/01/1998 20:54:16.590505 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 58 -AP
45 00 3a 00 53 48 00 40 2e 06 00 00 c7 2d 96 0d E.:.SH.@.....-..
c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 5c .^........zc0..\
50 18 7f 94 cf 20 00 00 50 49 4e 47 20 3a 31 38 P.... ..PING :18
35 36 36 37 39 37 38 34 0d 0a 56679784..
20/01/1998 20:54:16.590821 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 88 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 5c e1 aa 7a 75 .-......0..\..zu
50 10 44 70 e4 32 00 00 P.Dp.2..
20/01/1998 20:54:16.591583 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 57 -AP
45 00 39 00 40 89 00 00 40 06 00 25 c2 5e fe 86 E.9.@...@..%.^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 5c e1 aa 7a 75 .-......0..\..zu
50 18 44 70 0d 38 00 00 50 4f 4e 47 20 3a 31 38 P.Dp.8..PONG :18
35 36 36 37 39 37 38 34 0a 56679784.
20/01/1998 20:54:17.216318 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A
45 00 32 02 58 48 00*40*2e 06 00 00 c7 2d 96 0d E.2.XH.@.....-.. ver4, 20 bytes header, TOS=00110010,totlen=600,ID=0x4800,flags=010,fragoff=0,
TTL=46,proto=6,checksum=0x0,src=199.45.150.13. ^(r=0,DF=1!,MF=0)
c2 5e fe 86 1a 0b 09 96 e1 aa 7a 75 30 f3 b8 6d .^........zu0..m dst=194.94.254.134,sp=6667,dp=2454,sq#=0xe1aa7a75,ack#=0x30f3b86d
50 10 7f 83 fd 35 00 00 3a 43 75 6d 75 6c 75 73 P....5..:Cumulus hlen=20,bits=000000uAprsf,...(con't care anymore)
2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or
67 20 30 30 31 20 74 65 73 74 67 69 7a 20 3a 57 g 001 testgiz :W
65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 49 6e elcome to the In
74 65 72 6e 65 74 20 52 65 6c 61 79 20 4e 65 74 ternet Relay Net
77 6f 72 6b 20 74 65 73 74 67 69 7a 0d 0a 3a 43 work testgiz..:C
75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle
4e 65 74 2e 4f 72 67 20 30 30 32 20 74 65 73 74 Net.Org 002 test
67 69 7a 20 3a 59 6f 75 giz :You
20/01/1998 20:54:17.240136 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 96 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 6d e1 aa 7c 7f .-......0..m..|.
50 10 44 66 e2 21 00 00 P.Df.!..
20/01/1998 20:54:17.303375 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP
45 00 32 02 59 48 00 40 2e 06 00 00 c7 2d 96 0d E.2.YH.@.....-.. ;THIS
c2 5e fe 86 1a 0b 09 96 e1 aa 7c 7f 30 f3 b8 6d .^........|.0..m ;FRAG
50 18 7f 83 35 7b 00 00 20 35 20 3a 6b 6e 69 67 P...5{.. 5 :knig ;WILL
68 74 28 73 29 20 6f 6e 6c 69 6e 65 0d 0a 3a 43 ht(s) online..:C ;BE
75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle ;THROWN
4e 65 74 2e 4f 72 67 20 32 35 34 20 74 65 73 74 Net.Org 254 test ;AWAY!
67 69 7a 20 32 31 39 20 3a 63 6f 75 72 74 79 61 giz 219 :courtya
72 64 73 20 66 6f 72 6d 65 64 0d 0a 3a 43 75 6d rds formed..:Cum
75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 ulus.CO.CastleNe
74 2e 4f 72 67 20 32 35 35 20 74 65 73 74 67 69 t.Org 255 testgi
7a 20 3a 49 20 68 61 76 z :I hav
20/01/1998 20:54:17.421612 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 78 -AP
45 00 4e 00 40 97 00 00 40 06 00 3a c2 5e fe 86 E.N.@...@..:.^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 6d e1 aa 7e 89 .-......0..m..~.
50 18 42 5c 74 58 00 00 49 53 4f 4e 20 xx xx xx P.B\tX..ISON xxx;privacy
xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xxxxxxxxxxxxxxxx
xx xx xx xx xx xx xx xx xx xx xx xx 20 0a xxxxxxxxxxxx .
20/01/1998 20:54:18.030304 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A
45 00 32 02 5f 48 00 00 2e 06 00 00 c7 2d 96 0d E.2._H.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 7e 89 30 f3 b8 6d .^........~.0..m
50 10 7f 83 cf 11 00 00 74 6c 65 4e 65 74 2e 4f P.......tleNet.O
72 67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a rg 372 testgiz :
2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 -
20 20 20 20 20 20 20 20 02 43 75 6d 75 6c 75 73 .Cumulus
2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or
67 02 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e g...:Cumulus.CO.
43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 CastleNet.Org 37
32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 20 2 testgiz :-
20 20 20 20 20 20 20 2f /
20/01/1998 20:54:18.030518 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 a8 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 80 93 .-......0.......
50 10 44 66 dd e7 00 00 P.Df....
20/01/1998 20:54:18.089146 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP
45 00 32 02 60 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.`H.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 80 93 30 f3 b8 6d .^..........0..m
50 18 7f 83 66 67 00 00 65 74 2e 4f 72 67 20 33 P...fg..et.Org 3
37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 72 testgiz :-
20 20 20 20 20 20 20 20 5c 2f 20 20 20 20 20 48 \/ H
6f 6d 65 20 6f 66 20 43 75 6d 75 6c 75 73 20 49 ome of Cumulus I
6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 73 nternet Services
20 20 20 20 20 5c 2f 20 20 20 20 20 20 20 20 20 \/
20 20 20 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f ..:Cumulus.CO
2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3
37 32 20 74 65 73 74 67 72 testg
20/01/1998 20:54:18.089355 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 b1 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 82 9d .-......0.......
50 10 44 66 db dd 00 00 P.Df....
20/01/1998 20:54:18.097346 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A
45 00 28 00 61 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.aH.@.....-..
c2 5e fe 86 1a 0b 09 96 e1 aa 82 9d 30 f3 b8 93 .^..........0...
50 10 7f 5d a0 e6 00 00 P..]....
20/01/1998 20:54:18.539733 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A
45 00 32 02 63 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.cH.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 82 9d 30 f3 b8 93 .^..........0...
50 10 7f 5d a8 30 00 00 73 74 67 69 7a 20 3a 2d P..].0..stgiz :-
20 20 20 20 20 20 20 20 56 61 6c 65 6e 20 3c 76 Valen <v
61 6c 65 6e 40 63 61 73 74 6c 65 6e 65 74 2e 6f alen@castlenet.o
72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f rg>..:Cumulus.CO
2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3
37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 72 testgiz :-
20 20 20 20 20 53 6f 6c 61 63 65 20 3c 73 6f 6c Solace <sol
61 63 65 40 63 61 73 74 6c 65 6e 65 74 2e 6f 72 ace@castlenet.or
67 3e 0d 0a 3a 43 75 6d g>..:Cum
20/01/1998 20:54:18.640092 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 b2 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 84 a7 .-......0.......
50 10 44 70 d9 c9 00 00 P.Dp....
20/01/1998 20:54:18.784006 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A
45 00 32 02 64 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.dH.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 84 a7 30 f3 b8 93 .^..........0...
50 10 7f 5d 44 d5 00 00 4f 3a 20 4c 69 6e 65 73 P..]D...O: Lines
0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 ..:Cumulus.CO.Ca
73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 stleNet.Org 372
74 65 73 74 67 69 7a 20 3a 2d 20 35 2e 20 41 6c testgiz :- 5. Al
6c 20 53 65 78 20 43 68 61 6e 6e 65 6c 73 20 6d l Sex Channels m
75 73 74 20 62 65 20 2b 73 0d 0a 3a 43 75 6d 75 ust be +s..:Cumu
6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet
2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz
20 3a 2d 20 0d 0a 3a 43 :- ..:C
20/01/1998 20:54:18.840123 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 b3 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 86 b1 .-......0.......
50 10 44 70 d7 bf 00 00 P.Dp....
20/01/1998 20:54:18.874056 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP
45 00 32 02 65 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.eH.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 86 b1 30 f3 b8 93 .^..........0...
50 18 7f 5d 5f 23 00 00 72 76 65 72 2c 0d 0a 3a P..]_#..rver,..:
43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c Cumulus.CO.Castl
65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 eNet.Org 372 tes
74 67 69 7a 20 3a 2d 20 61 6e 64 20 74 68 65 20 tgiz :- and the
72 65 73 75 6c 74 73 20 6f 66 20 72 75 6e 6e 69 results of runni
6e 67 20 61 6e 79 20 63 6f 6d 6d 61 6e 64 73 20 ng any commands
79 6f 75 20 64 6f 20 61 73 20 61 20 72 65 73 75 you do as a resu
6c 74 20 6f 66 0d 0a 3a 43 75 6d 75 6c 75 73 2e lt of..:Cumulus.
43 4f 2e 43 61 73 74 6c CO.Castl
20/01/1998 20:54:18.874259 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 b4 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 88 bb .-......0.......
50 10 44 66 d5 bf 00 00 P.Df....
20/01/1998 20:54:19.228867 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A
45 00 32 02 68 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.hH.......-..
c2 5e fe 86 1a 0b 09 96 e1 aa 88 bb 30 f3 b8 93 .^..........0...
50 10 7f 5d f1 ac 00 00 20 66 6f 72 0d 0a 3a 43 P..].... for..:C
75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle
4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 74 Net.Org 372 test
67 69 7a 20 3a 2d 20 65 78 70 6c 61 6e 61 74 69 giz :- explanati
6f 6e 2e 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f on...:Cumulus.CO
2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3
37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 0d 0a 72 testgiz :- ..
3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast
6c 65 4e 65 74 2e 4f 72 leNet.Or
20/01/1998 20:54:19.240112 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 db 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 8a c5 .-......0.......
50 10 44 66 d3 b5 00 00 P.Df....
20/01/1998 20:54:19.754882 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 277 -AP
45 00 15 01 6a 48 00 40 2e 06 00 00 c7 2d 96 0d E...jH.@.....-..
c2 5e fe 86 1a 0b 09 96 e1 aa 8a c5 30 f3 b8 93 .^..........0...
50 18 7f 5d 00 50 00 00 65 20 57 65 62 3a 20 68 P..].P..e Web: h
74 74 70 3a 2f 2f 77 77 77 2e 63 61 73 74 6c 65 ttp://www.castle
6e 65 74 2e 6f 72 67 0d 0a 3a 43 75 6d 75 6c 75 net.org..:Cumulu
73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f s.CO.CastleNet.O
72 67 20 33 37 36 20 74 65 73 74 67 69 7a 20 3a rg 376 testgiz :
45 6e 64 20 6f 66 20 2f 4d 4f 54 44 20 63 6f 6d End of /MOTD com
6d 61 6e 64 2e 0d 0a 3a 4e 69 63 6b 53 65 72 76 mand...:NickServ
21 6e 69 63 6b 73 65 72 76 40 6e 69 63 6b 73 65 !nickserv@nickse
72 76 2e 43 61 73 74 6c rv.Castl
20/01/1998 20:54:19.755094 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 40 de 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^..
c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 8b b2 .-......0.......
50 10 44 70 d2 be 00 00 P.Dp....
---------------------- end first packet dump ---------------------



Next is the second dump, which does not exhibit the bug. I have marked
the byte in question with *20* (DF=0, MF=1):

--------------------- begin second packet dump ---------------------
20/01/1998 21:33:01.675410 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 60 -S
45 00 3c 00 41 01 00 00 40 06 00 28 c2 5e fe 86 E.<.A...@..(.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 06 00 00 00 00 .-......y.......
a0 02 40 00 35 18 00 00 02 04 05 b4 01 03 03 00 ..@.5...........
01 01 08 0a 00 06 52 53 00 00 00 00 ......RS....
20/01/1998 21:33:02.091848 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 44 -AS
45 00 2c 00 b7 ac 00 00 2e 06 00 00 c7 2d 96 0d E.,..........-..
c2 5e fe 86 1a 0b 09 97 c5 00 a2 5f 79 cd c8 07 .^........._y...
60 12 7f e0 2d 3e 00 00 02 04 05 b4 `...->......
20/01/1998 21:33:02.091987 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 06 00 00 40 06 00 14 c2 5e fe 86 E.(.A...@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 07 c5 00 a2 60 .-......y......`
50 10 44 70 80 6b 00 00 P.Dp.k..
20/01/1998 21:33:02.092467 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 53 -AP
45 00 35 00 41 07 00 00 40 06 00 21 c2 5e fe 86 E.5.A...@..!.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 07 c5 00 a2 60 .-......y......`
50 18 44 70 80 f8 00 00 4e 49 43 4b 20 74 65 73 P.Dp....NICK tes
74 67 69 7a 0a tgiz.
20/01/1998 21:33:02.527998 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A
45 00 28 00 bf ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 14 .^.........`y...
50 10 7f d3 44 fb 00 00 P...D...
20/01/1998 21:33:02.528107 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 103 -AP
45 00 67 00 41 09 00 00 40 06 00 53 c2 5e fe 86 E.g.A...@..S.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 14 c5 00 a2 60 .-......y......`
50 18 44 70 99 de 00 00 55 53 45 52 20 67 69 7a P.Dp....USER giz
6d 6f 20 7a 6f 72 6b 2e 6e 6f 72 74 68 2e 64 65 mo zork.north.de
20 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 Cumulus.CO.Cast
6c 65 4e 65 74 2e 4f 72 67 20 3a 4b 6c 61 75 73 leNet.Org :Klaus
20 57 65 62 65 72 0a Weber.
20/01/1998 21:33:03.125451 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A
45 00 28 00 c7 ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 53 .^.........`y..S
50 10 7f 94 44 fb 00 00 P...D...
20/01/1998 21:33:03.466686 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 58 -AP
45 00 3a 00 d3 ac 00 40 2e 06 00 00 c7 2d 96 0d E.:....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 53 .^.........`y..S
50 18 7f 94 75 fb 00 00 50 49 4e 47 20 3a 33 37 P...u...PING :37
32 39 37 37 35 39 31 30 0d 0a 29775910..
20/01/1998 21:33:03.466989 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 2b 00 00 40 06 00 14 c2 5e fe 86 E.(.A+..@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r
50 10 44 70 80 0d 00 00 P.Dp....
20/01/1998 21:33:03.467725 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 57 -AP
45 00 39 00 41 2c 00 00 40 06 00 25 c2 5e fe 86 E.9.A,..@..%.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r
50 18 44 70 b4 12 00 00 50 4f 4e 47 20 3a 33 37 P.Dp....PONG :37
32 39 37 37 35 39 31 30 0a 29775910.
20/01/1998 21:33:04.640227 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 57 -AP
45 00 39 00 41 39 00 00 40 06 00 25 c2 5e fe 86 E.9.A9..@..%.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r
50 18 44 70 b4 12 00 00 50 4f 4e 47 20 3a 33 37 P.Dp....PONG :37
32 39 37 37 35 39 31 30 0a 29775910.
20/01/1998 21:33:05.163967 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A
45 00 28 00 f0 ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 64 .^..........y..d
50 10 7f 83 35 7c 00 00 P...5|..
20/01/1998 21:33:05.857301 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP
45 00 3c 02 f9 ac 00*20*2e 06 00 00 c7 2d 96 0d E.<.... .....-..
c2 5e fe 86 1a 0b 09 97 c5 00 a2 72 79 cd c8 64 .^.........ry..d
50 18 7f 83 8a 6c 00 00 3a 43 75 6d 75 6c 75 73 P....l..:Cumulus
2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or
67 20 30 30 31 20 74 65 73 74 67 69 7a 20 3a 57 g 001 testgiz :W
65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 49 6e elcome to the In
74 65 72 6e 65 74 20 52 65 6c 61 79 20 4e 65 74 ternet Relay Net
77 6f 72 6b 20 74 65 73 74 67 69 7a 0d 0a 3a 43 work testgiz..:C
75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle
4e 65 74 2e 4f 72 67 20 30 30 32 20 74 65 73 74 Net.Org 002 test
67 69 7a 20 3a 59 6f 75 giz :You
20/01/1998 21:33:05.940604 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (517) frag 497@552
45 00 05 02 f9 ac 45 00 2e 06 00 00 c7 2d 96 0d E.....E......-..
c2 5e fe 86 28 73 29 20 6f 6e 6c 69 6e 65 0d 0a .^..(s) online..
3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast
6c 65 4e 65 74 2e 4f 72 67 20 32 35 34 20 74 65 leNet.Org 254 te
73 74 67 69 7a 20 32 31 38 20 3a 63 6f 75 72 74 stgiz 218 :court
79 61 72 64 73 20 66 6f 72 6d 65 64 0d 0a 3a 43 yards formed..:C
75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle
4e 65 74 2e 4f 72 67 20 32 35 35 20 74 65 73 74 Net.Org 255 test
67 69 7a 20 3a 49 20 68 61 76 65 20 31 34 20 70 giz :I have 14 p
65 61 73 61 6e 74 73 20 61 6e 64 20 35 20 6b 69 easants and 5 ki
6e 67 64 6f 6d 73 0d 0a ngdoms..
20/01/1998 21:33:05.940895 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 46 00 00 40 06 00 14 c2 5e fe 86 E.(.AF..@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 64 c5 00 a6 77 .-......y..d...w
50 10 42 6b 7d fc 00 00 P.Bk}...
20/01/1998 21:33:06.123772 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 78 -AP
45 00 4e 00 41 47 00 00 40 06 00 3a c2 5e fe 86 E.N.AG..@..:.^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 64 c5 00 a6 77 .-......y..d...w
50 18 42 6b 10 33 00 00 49 53 4f 4e 20 xx xx xx P.Bk.3..ISON xxx
xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xxxxxxxxxxxxxxxx
xx xx xx xx xx xx xx xx xx xx xx xx 20 0a xxxxxxxxxxxx .
20/01/1998 21:33:06.437284 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP
45 00 3c 02 04 ad 00 20 2e 06 00 00 c7 2d 96 0d E.<.... .....-..
c2 5e fe 86 1a 0b 09 97 c5 00 a6 77 79 cd c8 64 .^.........wy..d
50 18 7f 83 80 d1 00 00 3a 43 75 6d 75 6c 75 73 P.......:Cumulus
2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or
67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d g 372 testgiz :-
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 02 43 75 6d 75 6c 75 73 2e .Cumulus.
43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org
02 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 ...:Cumulus.CO.C
61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 astleNet.Org 372
20 74 65 73 74 67 69 7a testgiz
20/01/1998 21:33:06.513181 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (572) frag +552@552
45 00 3c 02 04 ad 45 20 2e 06 00 00 c7 2d 96 0d E.<...E .....-..
c2 5e fe 86 73 74 6c 65 4e 65 74 2e 4f 72 67 20 .^..stleNet.Org
33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 372 testgiz :-
20 20 20 20 20 20 20 20 20 5c 2f 20 20 20 20 20 \/
48 6f 6d 65 20 6f 66 20 43 75 6d 75 6c 75 73 20 Home of Cumulus
49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 Internet Service
73 20 20 20 20 20 5c 2f 20 20 20 20 20 20 20 20 s \/
20 20 20 20 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 ..:Cumulus.C
4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 O.CastleNet.Org
33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 372 testgiz :-
20 20 20 20 20 20 20 20
20/01/1998 21:33:06.588138 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (396) frag 376@1104
45 00 8c 01 04 ad 8a 00 2e 06 00 00 c7 2d 96 0d E............-..
c2 5e fe 86 6c 65 6e 40 63 61 73 74 6c 65 6e 65 .^..len@castlene
74 2e 6f 72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 t.org>..:Cumulus
2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or
67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d g 372 testgiz :-
20 20 20 20 20 20 20 20 53 6f 6c 61 63 65 20 3c Solace <
73 6f 6c 61 63 65 40 63 61 73 74 6c 65 6e 65 74 solace@castlenet
2e 6f 72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 2e .org>..:Cumulus.
43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org
20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 372 testgiz :-
20 20 20 20 20 0d 0a 3a ..:
20/01/1998 21:33:06.588414 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 48 00 00 40 06 00 14 c2 5e fe 86 E.(.AH..@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 ac 2b .-......y......+
50 10 40 bc 79 d1 00 00 P.@.y...
20/01/1998 21:33:06.688415 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP
45 00 3c 02 05 ad 00 20 2e 06 00 00 c7 2d 96 0d E.<.... .....-..
c2 5e fe 86 1a 0b 09 97 c5 00 ac 2b 79 cd c8 64 .^.........+y..d
50 18 7f 83 87 b2 00 00 75 6c 75 73 2e 43 4f 2e P.......ulus.CO.
43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 CastleNet.Org 37
32 20 74 65 73 74 67 69 7a 20 3a 2d 20 33 2e 20 2 testgiz :- 3.
4e 6f 20 49 6c 6c 65 67 61 6c 20 41 63 74 69 76 No Illegal Activ
69 74 69 65 73 0d 0a 3a 43 75 6d 75 6c 75 73 2e ities..:Cumulus.
43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org
20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 372 testgiz :-
34 2e 20 44 6f 6e 27 74 20 41 73 6b 20 66 6f 72 4. Don't Ask for
20 4f 3a 20 4c 69 6e 65 O: Line
20/01/1998 21:33:06.786990 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (572) frag +552@552
45 00 3c 02 05 ad 45 20 2e 06 00 00 c7 2d 96 0d E.<...E .....-..
c2 5e fe 86 20 6c 69 61 62 69 6c 69 74 79 0d 0a .^.. liability..
3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast
6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 leNet.Org 372 te
73 74 67 69 7a 20 3a 2d 20 66 6f 72 20 74 68 65 stgiz :- for the
20 63 6f 6e 74 65 6e 74 20 6f 66 20 61 6e 79 20 content of any
6d 65 73 73 61 67 65 73 20 77 68 69 63 68 20 70 messages which p
61 73 73 20 74 68 72 6f 75 67 68 20 74 68 69 73 ass through this
20 73 65 72 76 65 72 2c 0d 0a 3a 43 75 6d 75 6c server,..:Cumul
75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e us.CO.CastleNet.
4f 72 67 20 33 37 32 20 Org 372
20/01/1998 21:33:06.835448 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (396) frag 376@1104
45 00 8c 01 05 ad 8a 00 2e 06 00 00 c7 2d 96 0d E............-..
c2 5e fe 86 65 4e 65 74 2e 4f 72 67 20 33 37 32 .^..eNet.Org 372
20 74 65 73 74 67 69 7a 20 3a 2d 20 73 65 72 76 testgiz :- serv
65 72 20 74 6f 20 61 6e 79 20 75 73 65 72 2c 20 er to any user,
68 6f 73 74 2c 20 6f 72 20 73 69 74 65 20 77 69 host, or site wi
74 68 6f 75 74 20 77 61 72 6e 69 6e 67 20 6f 72 thout warning or
20 6e 65 65 64 20 66 6f 72 0d 0a 3a 43 75 6d 75 need for..:Cumu
6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet
2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz
20 3a 2d 20 65 78 70 6c 61 6e 61 74 69 6f 6e 2e :- explanation.
0d 0a 3a 43 75 6d 75 6c ..:Cumul
20/01/1998 21:33:06.835671 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 49 00 00 40 06 00 14 c2 5e fe 86 E.(.AI..@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b1 df .-......y.......
50 10 40 bc 74 1d 00 00 P.@.t...
20/01/1998 21:33:06.839945 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A
45 00 28 00 08 ad 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 8a .^..........y...
50 10 7f 5d 35 7c 00 00 P..]5|..
20/01/1998 21:33:07.281831 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 362 -AP
45 00 6a 01 15 ad 00 40 2e 06 00 00 c7 2d 96 0d E.j....@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 8a .^..........y...
50 18 7f 5d a7 c1 00 00 7a 20 3a 2d 20 0d 0a 3a P..]....z :- ..:
43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c Cumulus.CO.Castl
65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 eNet.Org 372 tes
74 67 69 7a 20 3a 2d 20 54 72 79 20 6f 75 72 20 tgiz :- Try our
6e 65 77 20 49 52 43 6d 75 64 2c 20 2f 6a 6f 69 new IRCmud, /joi
6e 20 23 4d 6f 72 64 6f 72 0d 0a 3a 43 75 6d 75 n #Mordor..:Cumu
6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet
2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz
20 3a 2d 20 50 6f 72 74 :- Port
20/01/1998 21:33:07.282049 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 7a 00 00 40 06 00 14 c2 5e fe 86 E.(.Az..@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b3 21 .-......y......!
50 10 44 70 6f 27 00 00 P.Dpo'..
20/01/1998 21:33:07.728234 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 182 -AP
45 00 b6 00 1c ad 00 40 2e 06 00 00 c7 2d 96 0d E......@.....-..
c2 5e fe 86 1a 0b 09 97 c5 00 b3 21 79 cd c8 8a .^.........!y...
50 18 7f 5d 31 f2 00 00 3a 4e 69 63 6b 53 65 72 P..]1...:NickSer
76 21 6e 69 63 6b 73 65 72 76 40 6e 69 63 6b 73 v!nickserv@nicks
65 72 76 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 erv.CastleNet.Or
67 20 4e 4f 54 49 43 45 20 74 65 73 74 67 69 7a g NOTICE testgiz
20 3a 54 68 65 20 72 65 63 6f 72 64 20 6e 75 6d :The record num
62 65 72 20 6f 66 20 75 73 65 72 73 20 73 74 61 ber of users sta
6e 64 73 20 61 74 20 31 31 33 2e 0d 0a 3a 43 75 nds at 113...:Cu
6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e mulus.CO.CastleN
65 74 2e 4f 72 67 20 33 et.Org 3
20/01/1998 21:33:07.728492 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A
45 00 28 00 41 83 00 00 40 06 00 14 c2 5e fe 86 E.(.A...@....^..
c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b3 af .-......y.......
50 10 44 70 6e 99 00 00 P.Dpn...
--------------------- end second packet dump ---------------------


Regards,
Klaus

\
 
 \ /
  Last update: 2005-03-22 13:41    [W:0.039 / U:0.624 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site