working with kernels 2.6.12.[3-5]?

Greg Louis <[email protected]> Mon, 15 Aug 2005 12:39:54 -0400
Newsgroups gmane.comp.encryption.cipe
Organization Dynamicro Consulting Limited
Message-ID <[email protected]>
I've managed to get cipe-1.6.0 to compile with the latest stable 2.6
kernels.  The patch (75 lines long, available on request) doesn't work
right: I have trouble receiving.  Many packets seem ok, but others
fail, and so far I've no idea what makes the difference.  The symptom
is that services like www, ssh (gets as far as [net]), nfs and pop3 may
just hang.

The topology is

  notebook<==cipe-link==>cipe-peer<--ethernet-->webserver

with cipe-1.6.0/linux-2.6.12.y on the notebook and
cipe-1.5.4/linux-2.4.32pre3 on the peer.

With tcpdump -vv running at both ends, a packet that failed looked like
this leaving the webserver:

16:00:15.438216 IP (tos 0x0, ttl  64, id 30162, offset 0, flags [DF],
proto: TCP (6), length: 912) webserver.farend.internal.www
> notebook.nearend.internal.48080: P 1:861(860) ack 2769 win 10928
<nop,nop,timestamp 81295539 9305319>

It also looked right at the peer, but got reported this way on arrival
at the notebook, and apparently discarded:

16:00:15.456269 unknown ip 0

If the far-end peer acts as gateway with SNAT to the Internet, the same
problem is encountered with connections to remote sites.

Despite having run 1.5.4 and predecessors for several years on 2.2 and
2.4 kernels, I'm a pretty complete newbie at network code so I'm not
very surprised I'm having trouble, but if anybody has pointers or hints
I'd be most grateful for the assistance.

-- 
| G r e g  L o u i s         | gpg public key: 0x400B1AA86D9E3E64 |
|  http://www.bgl.nu/~glouis |   (on my website or any keyserver) |
|  http://wecanstopspam.org in signatures helps fight junk email. |

--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>