Messages in this thread | | | Date | Thu, 22 Jan 1998 01:04:22 +0100 (CET) | From | Klaus Weber <> | Subject | Bug in Linux networking code |
| |
[ Sent to: linux-kernel@vger.rutgers.edu, and slice@castlenet.org (admin of the host where I discovered the bug). If the first address is incorrect, please forward it to the relevant maintainers/mailinglist. Thanks ]
Hi,
it seems like a have found a bug in the linux networking code: occasionally, it will set the DF (don't fragment) bit instead of the MF (more fragments) bit in the first fragment of a TCP segment (looks like a typo somewhere). I'm not sure under which circumstances this bug shows up.
The bug was discovered when connecting to the irc server on Cumulus.CO.CastleNet.Org (while transmitting the welcome message). I will include two packet-dumps, where the first one shows the bug, while the second does not (I don't know why this happens only occasionally).
The machine in question identifies itself as Red Hat Linux release 4.2 (Biltmore) Kernel 2.0.32 on an i586
As I don't use Linux myself, I can't check whether this is fixed in later versions of the kernel.
First packet dump, which shows the bug (captured with IP Filter on a NetBSD 1.3 machine. I added some comments next to the hexdump, and marked the byte in question as *40* (DF=1, MF=0). Sorry for the huge lines). The fragment following the buggy one would normally be caught and blocked by IP Filter, because the first fragment does not indicate that more fragments will follow (this is how I noticed the problem).
---------------------- begin first packet dump --------------------- 20/01/1998 20:54:11.586435 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 60 -S 45 00 3c 00 40 5e 00 00 40 06 00 28 c2 5e fe 86 E.<.@^..@..(.^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 0f 00 00 00 00 .-......0....... a0 02 40 00 a0 1f 00 00 02 04 05 b4 01 03 03 00 ..@............. 01 01 08 0a 00 06 40 1e 00 00 00 00 ......@..... 20/01/1998 20:54:12.035465 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 44 -AS 45 00 2c 00 3a 48 00 00 2e 06 00 00 c7 2d 96 0d E.,.:H.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 7a 62 30 f3 b8 10 .^........zb0... 60 12 7f e0 95 0d 00 00 02 04 02 0a `........... 20/01/1998 20:54:12.035600 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 63 00 00 40 06 00 14 c2 5e fe 86 E.(.@c..@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 10 e1 aa 7a 63 .-......0.....zc 50 10 44 70 e4 90 00 00 P.Dp.... 20/01/1998 20:54:12.036082 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 53 -AP 45 00 35 00 40 64 00 00 40 06 00 21 c2 5e fe 86 E.5.@d..@..!.^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 10 e1 aa 7a 63 .-......0.....zc 50 18 44 70 e5 1d 00 00 4e 49 43 4b 20 74 65 73 P.Dp....NICK tes 74 67 69 7a 0a tgiz. 20/01/1998 20:54:12.529537 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A 45 00 28 00 3c 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.<H.@.....-.. c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 1d .^........zc0... 50 10 7f d3 a9 20 00 00 P.... .. 20/01/1998 20:54:12.529655 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 103 -AP 45 00 67 00 40 66 00 00 40 06 00 53 c2 5e fe 86 E.g.@f..@..S.^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 1d e1 aa 7a 63 .-......0.....zc 50 18 44 70 fe 03 00 00 55 53 45 52 20 67 69 7a P.Dp....USER giz 6d 6f 20 7a 6f 72 6b 2e 6e 6f 72 74 68 2e 64 65 mo zork.north.de 20 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 Cumulus.CO.Cast 6c 65 4e 65 74 2e 4f 72 67 20 3a 4b 6c 61 75 73 leNet.Org :Klaus 20 57 65 62 65 72 0a Weber. 20/01/1998 20:54:12.988711 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A 45 00 28 00 40 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.@H.@.....-.. c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 5c .^........zc0..\ 50 10 7f 94 a9 20 00 00 P.... .. 20/01/1998 20:54:16.590505 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 58 -AP 45 00 3a 00 53 48 00 40 2e 06 00 00 c7 2d 96 0d E.:.SH.@.....-.. c2 5e fe 86 1a 0b 09 96 e1 aa 7a 63 30 f3 b8 5c .^........zc0..\ 50 18 7f 94 cf 20 00 00 50 49 4e 47 20 3a 31 38 P.... ..PING :18 35 36 36 37 39 37 38 34 0d 0a 56679784.. 20/01/1998 20:54:16.590821 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 88 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 5c e1 aa 7a 75 .-......0..\..zu 50 10 44 70 e4 32 00 00 P.Dp.2.. 20/01/1998 20:54:16.591583 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 57 -AP 45 00 39 00 40 89 00 00 40 06 00 25 c2 5e fe 86 E.9.@...@..%.^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 5c e1 aa 7a 75 .-......0..\..zu 50 18 44 70 0d 38 00 00 50 4f 4e 47 20 3a 31 38 P.Dp.8..PONG :18 35 36 36 37 39 37 38 34 0a 56679784. 20/01/1998 20:54:17.216318 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A 45 00 32 02 58 48 00*40*2e 06 00 00 c7 2d 96 0d E.2.XH.@.....-.. ver4, 20 bytes header, TOS=00110010,totlen=600,ID=0x4800,flags=010,fragoff=0, TTL=46,proto=6,checksum=0x0,src=199.45.150.13. ^(r=0,DF=1!,MF=0) c2 5e fe 86 1a 0b 09 96 e1 aa 7a 75 30 f3 b8 6d .^........zu0..m dst=194.94.254.134,sp=6667,dp=2454,sq#=0xe1aa7a75,ack#=0x30f3b86d 50 10 7f 83 fd 35 00 00 3a 43 75 6d 75 6c 75 73 P....5..:Cumulus hlen=20,bits=000000uAprsf,...(con't care anymore) 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or 67 20 30 30 31 20 74 65 73 74 67 69 7a 20 3a 57 g 001 testgiz :W 65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 49 6e elcome to the In 74 65 72 6e 65 74 20 52 65 6c 61 79 20 4e 65 74 ternet Relay Net 77 6f 72 6b 20 74 65 73 74 67 69 7a 0d 0a 3a 43 work testgiz..:C 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle 4e 65 74 2e 4f 72 67 20 30 30 32 20 74 65 73 74 Net.Org 002 test 67 69 7a 20 3a 59 6f 75 giz :You 20/01/1998 20:54:17.240136 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 96 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 6d e1 aa 7c 7f .-......0..m..|. 50 10 44 66 e2 21 00 00 P.Df.!.. 20/01/1998 20:54:17.303375 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP 45 00 32 02 59 48 00 40 2e 06 00 00 c7 2d 96 0d E.2.YH.@.....-.. ;THIS c2 5e fe 86 1a 0b 09 96 e1 aa 7c 7f 30 f3 b8 6d .^........|.0..m ;FRAG 50 18 7f 83 35 7b 00 00 20 35 20 3a 6b 6e 69 67 P...5{.. 5 :knig ;WILL 68 74 28 73 29 20 6f 6e 6c 69 6e 65 0d 0a 3a 43 ht(s) online..:C ;BE 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle ;THROWN 4e 65 74 2e 4f 72 67 20 32 35 34 20 74 65 73 74 Net.Org 254 test ;AWAY! 67 69 7a 20 32 31 39 20 3a 63 6f 75 72 74 79 61 giz 219 :courtya 72 64 73 20 66 6f 72 6d 65 64 0d 0a 3a 43 75 6d rds formed..:Cum 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 ulus.CO.CastleNe 74 2e 4f 72 67 20 32 35 35 20 74 65 73 74 67 69 t.Org 255 testgi 7a 20 3a 49 20 68 61 76 z :I hav 20/01/1998 20:54:17.421612 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 78 -AP 45 00 4e 00 40 97 00 00 40 06 00 3a c2 5e fe 86 E.N.@...@..:.^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 6d e1 aa 7e 89 .-......0..m..~. 50 18 42 5c 74 58 00 00 49 53 4f 4e 20 xx xx xx P.B\tX..ISON xxx;privacy xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xxxxxxxxxxxxxxxx xx xx xx xx xx xx xx xx xx xx xx xx 20 0a xxxxxxxxxxxx . 20/01/1998 20:54:18.030304 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A 45 00 32 02 5f 48 00 00 2e 06 00 00 c7 2d 96 0d E.2._H.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 7e 89 30 f3 b8 6d .^........~.0..m 50 10 7f 83 cf 11 00 00 74 6c 65 4e 65 74 2e 4f P.......tleNet.O 72 67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a rg 372 testgiz : 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 - 20 20 20 20 20 20 20 20 02 43 75 6d 75 6c 75 73 .Cumulus 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or 67 02 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e g...:Cumulus.CO. 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 CastleNet.Org 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 20 2 testgiz :- 20 20 20 20 20 20 20 2f / 20/01/1998 20:54:18.030518 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 a8 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 80 93 .-......0....... 50 10 44 66 dd e7 00 00 P.Df.... 20/01/1998 20:54:18.089146 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP 45 00 32 02 60 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.`H.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 80 93 30 f3 b8 6d .^..........0..m 50 18 7f 83 66 67 00 00 65 74 2e 4f 72 67 20 33 P...fg..et.Org 3 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 72 testgiz :- 20 20 20 20 20 20 20 20 5c 2f 20 20 20 20 20 48 \/ H 6f 6d 65 20 6f 66 20 43 75 6d 75 6c 75 73 20 49 ome of Cumulus I 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 73 nternet Services 20 20 20 20 20 5c 2f 20 20 20 20 20 20 20 20 20 \/ 20 20 20 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f ..:Cumulus.CO 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3 37 32 20 74 65 73 74 67 72 testg 20/01/1998 20:54:18.089355 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 b1 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 82 9d .-......0....... 50 10 44 66 db dd 00 00 P.Df.... 20/01/1998 20:54:18.097346 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 40 -A 45 00 28 00 61 48 00 40 2e 06 00 00 c7 2d 96 0d E.(.aH.@.....-.. c2 5e fe 86 1a 0b 09 96 e1 aa 82 9d 30 f3 b8 93 .^..........0... 50 10 7f 5d a0 e6 00 00 P..].... 20/01/1998 20:54:18.539733 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A 45 00 32 02 63 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.cH.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 82 9d 30 f3 b8 93 .^..........0... 50 10 7f 5d a8 30 00 00 73 74 67 69 7a 20 3a 2d P..].0..stgiz :- 20 20 20 20 20 20 20 20 56 61 6c 65 6e 20 3c 76 Valen <v 61 6c 65 6e 40 63 61 73 74 6c 65 6e 65 74 2e 6f alen@castlenet.o 72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f rg>..:Cumulus.CO 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 20 72 testgiz :- 20 20 20 20 20 53 6f 6c 61 63 65 20 3c 73 6f 6c Solace <sol 61 63 65 40 63 61 73 74 6c 65 6e 65 74 2e 6f 72 ace@castlenet.or 67 3e 0d 0a 3a 43 75 6d g>..:Cum 20/01/1998 20:54:18.640092 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 b2 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 84 a7 .-......0....... 50 10 44 70 d9 c9 00 00 P.Dp.... 20/01/1998 20:54:18.784006 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A 45 00 32 02 64 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.dH.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 84 a7 30 f3 b8 93 .^..........0... 50 10 7f 5d 44 d5 00 00 4f 3a 20 4c 69 6e 65 73 P..]D...O: Lines 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 ..:Cumulus.CO.Ca 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 stleNet.Org 372 74 65 73 74 67 69 7a 20 3a 2d 20 35 2e 20 41 6c testgiz :- 5. Al 6c 20 53 65 78 20 43 68 61 6e 6e 65 6c 73 20 6d l Sex Channels m 75 73 74 20 62 65 20 2b 73 0d 0a 3a 43 75 6d 75 ust be +s..:Cumu 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet 2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz 20 3a 2d 20 0d 0a 3a 43 :- ..:C 20/01/1998 20:54:18.840123 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 b3 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 86 b1 .-......0....... 50 10 44 70 d7 bf 00 00 P.Dp.... 20/01/1998 20:54:18.874056 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -AP 45 00 32 02 65 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.eH.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 86 b1 30 f3 b8 93 .^..........0... 50 18 7f 5d 5f 23 00 00 72 76 65 72 2c 0d 0a 3a P..]_#..rver,..: 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c Cumulus.CO.Castl 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 eNet.Org 372 tes 74 67 69 7a 20 3a 2d 20 61 6e 64 20 74 68 65 20 tgiz :- and the 72 65 73 75 6c 74 73 20 6f 66 20 72 75 6e 6e 69 results of runni 6e 67 20 61 6e 79 20 63 6f 6d 6d 61 6e 64 73 20 ng any commands 79 6f 75 20 64 6f 20 61 73 20 61 20 72 65 73 75 you do as a resu 6c 74 20 6f 66 0d 0a 3a 43 75 6d 75 6c 75 73 2e lt of..:Cumulus. 43 4f 2e 43 61 73 74 6c CO.Castl 20/01/1998 20:54:18.874259 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 b4 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 88 bb .-......0....... 50 10 44 66 d5 bf 00 00 P.Df.... 20/01/1998 20:54:19.228867 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 562 -A 45 00 32 02 68 48 00 00 2e 06 00 00 c7 2d 96 0d E.2.hH.......-.. c2 5e fe 86 1a 0b 09 96 e1 aa 88 bb 30 f3 b8 93 .^..........0... 50 10 7f 5d f1 ac 00 00 20 66 6f 72 0d 0a 3a 43 P..].... for..:C 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 74 Net.Org 372 test 67 69 7a 20 3a 2d 20 65 78 70 6c 61 6e 61 74 69 giz :- explanati 6f 6e 2e 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f on...:Cumulus.CO 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 .CastleNet.Org 3 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 0d 0a 72 testgiz :- .. 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast 6c 65 4e 65 74 2e 4f 72 leNet.Or 20/01/1998 20:54:19.240112 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 db 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 8a c5 .-......0....... 50 10 44 66 d3 b5 00 00 P.Df.... 20/01/1998 20:54:19.754882 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2454 PR tcp len 20 277 -AP 45 00 15 01 6a 48 00 40 2e 06 00 00 c7 2d 96 0d E...jH.@.....-.. c2 5e fe 86 1a 0b 09 96 e1 aa 8a c5 30 f3 b8 93 .^..........0... 50 18 7f 5d 00 50 00 00 65 20 57 65 62 3a 20 68 P..].P..e Web: h 74 74 70 3a 2f 2f 77 77 77 2e 63 61 73 74 6c 65 ttp://www.castle 6e 65 74 2e 6f 72 67 0d 0a 3a 43 75 6d 75 6c 75 net.org..:Cumulu 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f s.CO.CastleNet.O 72 67 20 33 37 36 20 74 65 73 74 67 69 7a 20 3a rg 376 testgiz : 45 6e 64 20 6f 66 20 2f 4d 4f 54 44 20 63 6f 6d End of /MOTD com 6d 61 6e 64 2e 0d 0a 3a 4e 69 63 6b 53 65 72 76 mand...:NickServ 21 6e 69 63 6b 73 65 72 76 40 6e 69 63 6b 73 65 !nickserv@nickse 72 76 2e 43 61 73 74 6c rv.Castl 20/01/1998 20:54:19.755094 ppp0 @250:3 p zork.north.de,2454 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 40 de 00 00 40 06 00 14 c2 5e fe 86 E.(.@...@....^.. c7 2d 96 0d 09 96 1a 0b 30 f3 b8 93 e1 aa 8b b2 .-......0....... 50 10 44 70 d2 be 00 00 P.Dp.... ---------------------- end first packet dump ---------------------
Next is the second dump, which does not exhibit the bug. I have marked the byte in question with *20* (DF=0, MF=1):
--------------------- begin second packet dump --------------------- 20/01/1998 21:33:01.675410 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 60 -S 45 00 3c 00 41 01 00 00 40 06 00 28 c2 5e fe 86 E.<.A...@..(.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 06 00 00 00 00 .-......y....... a0 02 40 00 35 18 00 00 02 04 05 b4 01 03 03 00 ..@.5........... 01 01 08 0a 00 06 52 53 00 00 00 00 ......RS.... 20/01/1998 21:33:02.091848 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 44 -AS 45 00 2c 00 b7 ac 00 00 2e 06 00 00 c7 2d 96 0d E.,..........-.. c2 5e fe 86 1a 0b 09 97 c5 00 a2 5f 79 cd c8 07 .^........._y... 60 12 7f e0 2d 3e 00 00 02 04 05 b4 `...->...... 20/01/1998 21:33:02.091987 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 06 00 00 40 06 00 14 c2 5e fe 86 E.(.A...@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 07 c5 00 a2 60 .-......y......` 50 10 44 70 80 6b 00 00 P.Dp.k.. 20/01/1998 21:33:02.092467 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 53 -AP 45 00 35 00 41 07 00 00 40 06 00 21 c2 5e fe 86 E.5.A...@..!.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 07 c5 00 a2 60 .-......y......` 50 18 44 70 80 f8 00 00 4e 49 43 4b 20 74 65 73 P.Dp....NICK tes 74 67 69 7a 0a tgiz. 20/01/1998 21:33:02.527998 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A 45 00 28 00 bf ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 14 .^.........`y... 50 10 7f d3 44 fb 00 00 P...D... 20/01/1998 21:33:02.528107 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 103 -AP 45 00 67 00 41 09 00 00 40 06 00 53 c2 5e fe 86 E.g.A...@..S.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 14 c5 00 a2 60 .-......y......` 50 18 44 70 99 de 00 00 55 53 45 52 20 67 69 7a P.Dp....USER giz 6d 6f 20 7a 6f 72 6b 2e 6e 6f 72 74 68 2e 64 65 mo zork.north.de 20 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 Cumulus.CO.Cast 6c 65 4e 65 74 2e 4f 72 67 20 3a 4b 6c 61 75 73 leNet.Org :Klaus 20 57 65 62 65 72 0a Weber. 20/01/1998 21:33:03.125451 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A 45 00 28 00 c7 ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 53 .^.........`y..S 50 10 7f 94 44 fb 00 00 P...D... 20/01/1998 21:33:03.466686 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 58 -AP 45 00 3a 00 d3 ac 00 40 2e 06 00 00 c7 2d 96 0d E.:....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 a2 60 79 cd c8 53 .^.........`y..S 50 18 7f 94 75 fb 00 00 50 49 4e 47 20 3a 33 37 P...u...PING :37 32 39 37 37 35 39 31 30 0d 0a 29775910.. 20/01/1998 21:33:03.466989 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 2b 00 00 40 06 00 14 c2 5e fe 86 E.(.A+..@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r 50 10 44 70 80 0d 00 00 P.Dp.... 20/01/1998 21:33:03.467725 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 57 -AP 45 00 39 00 41 2c 00 00 40 06 00 25 c2 5e fe 86 E.9.A,..@..%.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r 50 18 44 70 b4 12 00 00 50 4f 4e 47 20 3a 33 37 P.Dp....PONG :37 32 39 37 37 35 39 31 30 0a 29775910. 20/01/1998 21:33:04.640227 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 57 -AP 45 00 39 00 41 39 00 00 40 06 00 25 c2 5e fe 86 E.9.A9..@..%.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 53 c5 00 a2 72 .-......y..S...r 50 18 44 70 b4 12 00 00 50 4f 4e 47 20 3a 33 37 P.Dp....PONG :37 32 39 37 37 35 39 31 30 0a 29775910. 20/01/1998 21:33:05.163967 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A 45 00 28 00 f0 ac 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 64 .^..........y..d 50 10 7f 83 35 7c 00 00 P...5|.. 20/01/1998 21:33:05.857301 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP 45 00 3c 02 f9 ac 00*20*2e 06 00 00 c7 2d 96 0d E.<.... .....-.. c2 5e fe 86 1a 0b 09 97 c5 00 a2 72 79 cd c8 64 .^.........ry..d 50 18 7f 83 8a 6c 00 00 3a 43 75 6d 75 6c 75 73 P....l..:Cumulus 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or 67 20 30 30 31 20 74 65 73 74 67 69 7a 20 3a 57 g 001 testgiz :W 65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 49 6e elcome to the In 74 65 72 6e 65 74 20 52 65 6c 61 79 20 4e 65 74 ternet Relay Net 77 6f 72 6b 20 74 65 73 74 67 69 7a 0d 0a 3a 43 work testgiz..:C 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle 4e 65 74 2e 4f 72 67 20 30 30 32 20 74 65 73 74 Net.Org 002 test 67 69 7a 20 3a 59 6f 75 giz :You 20/01/1998 21:33:05.940604 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (517) frag 497@552 45 00 05 02 f9 ac 45 00 2e 06 00 00 c7 2d 96 0d E.....E......-.. c2 5e fe 86 28 73 29 20 6f 6e 6c 69 6e 65 0d 0a .^..(s) online.. 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast 6c 65 4e 65 74 2e 4f 72 67 20 32 35 34 20 74 65 leNet.Org 254 te 73 74 67 69 7a 20 32 31 38 20 3a 63 6f 75 72 74 stgiz 218 :court 79 61 72 64 73 20 66 6f 72 6d 65 64 0d 0a 3a 43 yards formed..:C 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 umulus.CO.Castle 4e 65 74 2e 4f 72 67 20 32 35 35 20 74 65 73 74 Net.Org 255 test 67 69 7a 20 3a 49 20 68 61 76 65 20 31 34 20 70 giz :I have 14 p 65 61 73 61 6e 74 73 20 61 6e 64 20 35 20 6b 69 easants and 5 ki 6e 67 64 6f 6d 73 0d 0a ngdoms.. 20/01/1998 21:33:05.940895 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 46 00 00 40 06 00 14 c2 5e fe 86 E.(.AF..@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 64 c5 00 a6 77 .-......y..d...w 50 10 42 6b 7d fc 00 00 P.Bk}... 20/01/1998 21:33:06.123772 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 78 -AP 45 00 4e 00 41 47 00 00 40 06 00 3a c2 5e fe 86 E.N.AG..@..:.^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 64 c5 00 a6 77 .-......y..d...w 50 18 42 6b 10 33 00 00 49 53 4f 4e 20 xx xx xx P.Bk.3..ISON xxx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xxxxxxxxxxxxxxxx xx xx xx xx xx xx xx xx xx xx xx xx 20 0a xxxxxxxxxxxx . 20/01/1998 21:33:06.437284 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP 45 00 3c 02 04 ad 00 20 2e 06 00 00 c7 2d 96 0d E.<.... .....-.. c2 5e fe 86 1a 0b 09 97 c5 00 a6 77 79 cd c8 64 .^.........wy..d 50 18 7f 83 80 d1 00 00 3a 43 75 6d 75 6c 75 73 P.......:Cumulus 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or 67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d g 372 testgiz :- 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 02 43 75 6d 75 6c 75 73 2e .Cumulus. 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org 02 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 ...:Cumulus.CO.C 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 astleNet.Org 372 20 74 65 73 74 67 69 7a testgiz 20/01/1998 21:33:06.513181 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (572) frag +552@552 45 00 3c 02 04 ad 45 20 2e 06 00 00 c7 2d 96 0d E.<...E .....-.. c2 5e fe 86 73 74 6c 65 4e 65 74 2e 4f 72 67 20 .^..stleNet.Org 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 372 testgiz :- 20 20 20 20 20 20 20 20 20 5c 2f 20 20 20 20 20 \/ 48 6f 6d 65 20 6f 66 20 43 75 6d 75 6c 75 73 20 Home of Cumulus 49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 Internet Service 73 20 20 20 20 20 5c 2f 20 20 20 20 20 20 20 20 s \/ 20 20 20 20 0d 0a 3a 43 75 6d 75 6c 75 73 2e 43 ..:Cumulus.C 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 O.CastleNet.Org 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 20 372 testgiz :- 20 20 20 20 20 20 20 20 20/01/1998 21:33:06.588138 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (396) frag 376@1104 45 00 8c 01 04 ad 8a 00 2e 06 00 00 c7 2d 96 0d E............-.. c2 5e fe 86 6c 65 6e 40 63 61 73 74 6c 65 6e 65 .^..len@castlene 74 2e 6f 72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 t.org>..:Cumulus 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 .CO.CastleNet.Or 67 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d g 372 testgiz :- 20 20 20 20 20 20 20 20 53 6f 6c 61 63 65 20 3c Solace < 73 6f 6c 61 63 65 40 63 61 73 74 6c 65 6e 65 74 solace@castlenet 2e 6f 72 67 3e 0d 0a 3a 43 75 6d 75 6c 75 73 2e .org>..:Cumulus. 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 372 testgiz :- 20 20 20 20 20 0d 0a 3a ..: 20/01/1998 21:33:06.588414 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 48 00 00 40 06 00 14 c2 5e fe 86 E.(.AH..@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 ac 2b .-......y......+ 50 10 40 bc 79 d1 00 00 P.@.y... 20/01/1998 21:33:06.688415 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 572 -AP 45 00 3c 02 05 ad 00 20 2e 06 00 00 c7 2d 96 0d E.<.... .....-.. c2 5e fe 86 1a 0b 09 97 c5 00 ac 2b 79 cd c8 64 .^.........+y..d 50 18 7f 83 87 b2 00 00 75 6c 75 73 2e 43 4f 2e P.......ulus.CO. 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 20 33 37 CastleNet.Org 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 33 2e 20 2 testgiz :- 3. 4e 6f 20 49 6c 6c 65 67 61 6c 20 41 63 74 69 76 No Illegal Activ 69 74 69 65 73 0d 0a 3a 43 75 6d 75 6c 75 73 2e ities..:Cumulus. 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 67 CO.CastleNet.Org 20 33 37 32 20 74 65 73 74 67 69 7a 20 3a 2d 20 372 testgiz :- 34 2e 20 44 6f 6e 27 74 20 41 73 6b 20 66 6f 72 4. Don't Ask for 20 4f 3a 20 4c 69 6e 65 O: Line 20/01/1998 21:33:06.786990 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (572) frag +552@552 45 00 3c 02 05 ad 45 20 2e 06 00 00 c7 2d 96 0d E.<...E .....-.. c2 5e fe 86 20 6c 69 61 62 69 6c 69 74 79 0d 0a .^.. liability.. 3a 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 :Cumulus.CO.Cast 6c 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 leNet.Org 372 te 73 74 67 69 7a 20 3a 2d 20 66 6f 72 20 74 68 65 stgiz :- for the 20 63 6f 6e 74 65 6e 74 20 6f 66 20 61 6e 79 20 content of any 6d 65 73 73 61 67 65 73 20 77 68 69 63 68 20 70 messages which p 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 69 73 ass through this 20 73 65 72 76 65 72 2c 0d 0a 3a 43 75 6d 75 6c server,..:Cumul 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 2e us.CO.CastleNet. 4f 72 67 20 33 37 32 20 Org 372 20/01/1998 21:33:06.835448 ppp0 @200:18 p cumulus.org -> zork.north.de PR tcp len 20 (396) frag 376@1104 45 00 8c 01 05 ad 8a 00 2e 06 00 00 c7 2d 96 0d E............-.. c2 5e fe 86 65 4e 65 74 2e 4f 72 67 20 33 37 32 .^..eNet.Org 372 20 74 65 73 74 67 69 7a 20 3a 2d 20 73 65 72 76 testgiz :- serv 65 72 20 74 6f 20 61 6e 79 20 75 73 65 72 2c 20 er to any user, 68 6f 73 74 2c 20 6f 72 20 73 69 74 65 20 77 69 host, or site wi 74 68 6f 75 74 20 77 61 72 6e 69 6e 67 20 6f 72 thout warning or 20 6e 65 65 64 20 66 6f 72 0d 0a 3a 43 75 6d 75 need for..:Cumu 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet 2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz 20 3a 2d 20 65 78 70 6c 61 6e 61 74 69 6f 6e 2e :- explanation. 0d 0a 3a 43 75 6d 75 6c ..:Cumul 20/01/1998 21:33:06.835671 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 49 00 00 40 06 00 14 c2 5e fe 86 E.(.AI..@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b1 df .-......y....... 50 10 40 bc 74 1d 00 00 P.@.t... 20/01/1998 21:33:06.839945 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 40 -A 45 00 28 00 08 ad 00 40 2e 06 00 00 c7 2d 96 0d E.(....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 8a .^..........y... 50 10 7f 5d 35 7c 00 00 P..]5|.. 20/01/1998 21:33:07.281831 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 362 -AP 45 00 6a 01 15 ad 00 40 2e 06 00 00 c7 2d 96 0d E.j....@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 b1 df 79 cd c8 8a .^..........y... 50 18 7f 5d a7 c1 00 00 7a 20 3a 2d 20 0d 0a 3a P..]....z :- ..: 43 75 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c Cumulus.CO.Castl 65 4e 65 74 2e 4f 72 67 20 33 37 32 20 74 65 73 eNet.Org 372 tes 74 67 69 7a 20 3a 2d 20 54 72 79 20 6f 75 72 20 tgiz :- Try our 6e 65 77 20 49 52 43 6d 75 64 2c 20 2f 6a 6f 69 new IRCmud, /joi 6e 20 23 4d 6f 72 64 6f 72 0d 0a 3a 43 75 6d 75 n #Mordor..:Cumu 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e 65 74 lus.CO.CastleNet 2e 4f 72 67 20 33 37 32 20 74 65 73 74 67 69 7a .Org 372 testgiz 20 3a 2d 20 50 6f 72 74 :- Port 20/01/1998 21:33:07.282049 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 7a 00 00 40 06 00 14 c2 5e fe 86 E.(.Az..@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b3 21 .-......y......! 50 10 44 70 6f 27 00 00 P.Dpo'.. 20/01/1998 21:33:07.728234 ppp0 @200:18 p cumulus.org,ircd -> zork.north.de,2455 PR tcp len 20 182 -AP 45 00 b6 00 1c ad 00 40 2e 06 00 00 c7 2d 96 0d E......@.....-.. c2 5e fe 86 1a 0b 09 97 c5 00 b3 21 79 cd c8 8a .^.........!y... 50 18 7f 5d 31 f2 00 00 3a 4e 69 63 6b 53 65 72 P..]1...:NickSer 76 21 6e 69 63 6b 73 65 72 76 40 6e 69 63 6b 73 v!nickserv@nicks 65 72 76 2e 43 61 73 74 6c 65 4e 65 74 2e 4f 72 erv.CastleNet.Or 67 20 4e 4f 54 49 43 45 20 74 65 73 74 67 69 7a g NOTICE testgiz 20 3a 54 68 65 20 72 65 63 6f 72 64 20 6e 75 6d :The record num 62 65 72 20 6f 66 20 75 73 65 72 73 20 73 74 61 ber of users sta 6e 64 73 20 61 74 20 31 31 33 2e 0d 0a 3a 43 75 nds at 113...:Cu 6d 75 6c 75 73 2e 43 4f 2e 43 61 73 74 6c 65 4e mulus.CO.CastleN 65 74 2e 4f 72 67 20 33 et.Org 3 20/01/1998 21:33:07.728492 ppp0 @250:3 p zork.north.de,2455 -> cumulus.org,ircd PR tcp len 20 40 -A 45 00 28 00 41 83 00 00 40 06 00 14 c2 5e fe 86 E.(.A...@....^.. c7 2d 96 0d 09 97 1a 0b 79 cd c8 8a c5 00 b3 af .-......y....... 50 10 44 70 6e 99 00 00 P.Dpn... --------------------- end second packet dump ---------------------
Regards, Klaus
| |