Re: Problem with short udp packets

> kernel: UDP: short packet: a.b.c.d:40025 1528/1512 to e.f.g.h:40025
>
> on the e.f.g.h side. The interesting part about it is that all this udp packets
> contain an ID-field of 0, whereas the normal data packets are counted up. After
> these appear the throughput seems to drop dramatically.
> Can this be a problem in key exchange?

This looks like these are in fact the KX packets. Apparently the KX
packets, which are sent out via the regular UDP sendmsg() mechanism,
are treated differently wrt. IP ID generation than data packets, where
we fill all IP headers ourselves. Being able to tell KX packets apart
this way is a security problem, this must be fixed.

Which kernel version? This stuff is highly kernel version dependent.

For the original problem, can you try if the problem is still present
in the CVS version?

Olaf


--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>