Re: TCP checksum and device driver eri0

Scott Howard <[email protected]>
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
On Fri, Jun 27, 2003 at 04:30:41PM +0200, Giovanni Porcelli wrote:
> During a snoop session on a 280R with solaris 9 and network interface 
> eri0, I noticed that the TCP checksum field of every outgoing packet was 
> incorrect.

The ERI interface calculates the checksum in hardware, so at the point in
the stack where snoop is reading the data the checksum is indeed incorrect,
but it will be calculated and updated before it leaves the physical
interface.  This is done for the fairly obvious performance improvement it
provides.

> If I want to snoop locally *but* with the correct checksum value, how 

The only way to see the correct checksum on the outgoing packets is to
disable hardware checksum calculations by adding the following to
/etc/system and rebooting :
set ip:dohwcksum=0

Obviously doing this will have a performance hit on the system.

  Scott
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.