Re: TCP checksum and device driver eri0

From: Martin Paul (martin_at_par.univie.ac.at)
Date: 06/30/03

  • Next message: Casper Dik: "Re: TCP checksum and device driver eri0" 
    Date: Mon, 30 Jun 2003 10:20:49 +0200 (MEST)
To: focus-sun@securityfocus.com

    > During a snoop session on a 280R with solaris 9 and network interface
    > eri0, I noticed that the TCP checksum field of every outgoing packet was
    > incorrect.
    > ...
    > The same packet snooped on the network has the correct checksum value.
    > I believe that something happens between the snoop point on the machine
    > and the network interface eri0 output.

    I guess that's the same effect that's described in the ethereal FAQ at:

      http://www.ethereal.com/faq.html#q5.8
      
    It's because the checksum is added to the packet by the network
    interface, and not by the TCP/IP stack.

    mp. 

    -- 
                         Martin Paul | Systems Administrator
      Institute for Software Science | martin@par.univie.ac.at
Liechtensteinstrasse 22, A-1090 Wien | Tel: 01 4277 38803
        http://www.par.univie.ac.at/ | Fax: 01 4277 9388
  • Next message: Casper Dik: "Re: TCP checksum and device driver eri0"

    Relevant Pages

    • Entirely ignoring TCP and UDP checksum in kernel level
      ... - We have an old network concentrator device in our WAN, ... TCP SYN ACK reply from 192.168.1.1 ... The client from which we send telnet requests to the device gets a packet ... The network concentrator computes the TCP checksum with the source address ...
      (Linux-Kernel)
    • alt.2600 FAQ Revision .014 (2/4)
      ... One type of firewall is the packet filtering firewall. ... Dropping packets instead of rejecting them greatly increases the time required to scan your network. ... Port scanning UDP ports is much slower than port scanning TCP ports. ... Chartreuse Use the electricity from your phone line Cheese Connect two phones to create a diverter Chrome Manipulate Traffic Signals by Remote Control ...
      (alt.2600)
    • Re: Setting up Airport Express
      ... It is usually referred to as a "MAC Address", ... System Preferences> Network, select the appropriate network interface, ... When your computer sends a data packet out over an Ethernet (Airport ... The destination address needs to be known in advance. ...
      (uk.comp.sys.mac)
    • Re: Setting up Airport Express
      ... It is usually referred to as a "MAC Address", ... on their network. ... always the hardware address assigned to the computer sending the packet. ... When your router receives a packet destined for a computer on your LAN, ...
      (uk.comp.sys.mac)
    • RE: Freebsd Theme Song
      ... from the network into the ethernet receiver. ... It takes a certain amount of time to get the packet out of ... At low data rates polling is less ... >Subject: Re: Freebsd Theme Song ...
      (freebsd-questions)