Displaying 20 results from an estimated 43 matches for "ihle".
Did you mean:
idle
2003 Aug 02
1
[SECURITY] Netfilter Security Advisory: NAT Remote DOS (SACK mangle)
--7ZAtKRhVyVSsbBD2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Netfilter Core Team Security Advisory
=20
CVE: CAN-2003-0467
Subject:
Netfilter / NAT Remote DoS
Released:
01 Aug 2003
Effects:
Under limited circumstances, a remote user may be able to crash
2001 Dec 13
14
tc: u32 match in nexthdr not working?
Hello,
it seems, that filtering on nexthdr (TCP/UDP) content, especially
src or dst port, is not working.
The following has no effect on 2.4.16 or older (even 2.2) kernels:
# tc filter add dev eth0 parent ffff: protocol ip prio 50 u32 match tcp
dst 3128 0xffff police rate 40kbit burst 10k drop flowid :1
Even if
# tc filter ls dev eth0 parent ffff:
filter protocol ip pref 50 u32
filter protocol
2008 Sep 12
4
Custom build kernel patch fails big time.
I am trying to build a custom kernel for the HIPL code
(infrahip.hip.fi), using the patch for the Linux 2.6.18 kernel. I
followed all the instructions for getting the kernel source and making a
custom kernel provided on the wiki. The rpmbuild fails with the
following messages:
Get an error on this step (figured out my other problem):
Patch #40000
2007 Dec 04
1
seq() does not create proper numbers (PR#10489)
Full_Name: Rico Ihle
Version: 2.6.1
OS: Windows XP Professional Version 2002 Pentium(R) 4 CPU 3.2 GHz
Submission from: (NULL) (134.76.183.24)
# Bug in seq() function:
x <- seq(-2,2,by=0.01)
which(x==0.05)# How that??
# although:
x# 0.05 seems to be at position 206 of x!!:
x[206]
# Why is this not equal to 0.05?
#...
1999 Jul 30
0
Linux 2.2.10 ipchains Advisory (fwd)
---------- Forwarded message ----------
Received: from lists.securityfocus.com (lists.securityfocus.com [216.102.46.4])
by blues.jpj.net (right/backatcha) with SMTP id VAA15167
for <trevor@JPJ.NET>; Tue, 27 Jul 1999 21:17:48 -0400 (EDT)
Received: (qmail 28179 invoked from network); 27 Jul 1999 19:14:06 -0000
Received: from lists.securityfocus.com (216.102.46.4)
by lists.securityfocus.com
2013 Nov 28
4
[PATCH net] xen-netback: fix fragment detection in checksum setup
The code to detect fragments in checksum_setup() was missing for IPv4 and
too eager for IPv6. (It transpires that Windows seems to send IPv6 packets
with a fragment header even if they are not a fragment - i.e. offset is zero,
and M bit is not set).
Signed-off-by: Paul Durrant <paul.durrant@citrix.com>
Cc: Wei Liu <wei.liu2@citrix.com>
Cc: Ian Campbell <ian.campbell@citrix.com>
2013 Nov 25
0
[Bug 876] New: bizarre handling of "related" connection packets (wrong OUTPUT interface assigned)
https://bugzilla.netfilter.org/show_bug.cgi?id=876
Summary: bizarre handling of "related" connection packets
(wrong OUTPUT interface assigned)
Product: netfilter/iptables
Version: unspecified
Platform: x86_64
OS/Version: Fedora
Status: NEW
Severity: normal
Priority: P5
2006 Jul 06
12
kernel BUG at net/core/dev.c:1133!
Looks like the GSO is involved?
I got this while running Dom0 only (no guests), with a
BOINC/Rosetta@home application running on all 4 cores.
changeset: 10649:8e55c5c11475
Build: x86_32p (pae).
------------[ cut here ]------------
kernel BUG at net/core/dev.c:1133!
invalid opcode: 0000 [#1]
SMP
CPU: 0
EIP: 0061:[<c04dceb0>] Not tainted VLI
EFLAGS: 00210297 (2.6.16.13-xen
2006 Jan 17
0
asterisk.ctl limitations
Hi
I wrote a small patch to netcat to work with unix domain sockets to
enable me to communicate with an asterisk daemon through the
unix-domain socket /var/run/asterisk/asterisk.ctl .
Only then I noticed that reading the code is done very differently than
a typical network protocol: it expects every command in a separate read.
Basically I used the following filter to pipe commands from the
2007 Apr 11
4
Policing based on port numbers
Hi,
I''m trying to police ingress traffic based on port numbers and IP
addresses. The u32 match based on IP addresses seems to work without
issues and I''m am able to police incoming packets. However, the same
isn''t working with u32 matches based on TCP port numbers. For port
numbers, I added exactly one ''u32 match'' rule:
common for both:
# tc qdisc add
2005 Oct 14
5
[PATCH] Fix NAT for domU checksum offload
Below is a fix for the current problem of checksum offload not working
in a NAT''ed network. The cause is the NAT/iptables code incorrectly
modifying the TCP/UDP checksum (for the checksum offload case). The
original code assumes a valid checksum, which is not the case for
checksum offload packets (which has a complimented, partial checksum for
the hardware to use). The fix is to
2009 Mar 12
1
the return value of packet_peek()
Hello, all:
I am executing ipconfig under a terminal and find one thing:
If I execute ipconfig the first time, it will get an ip address from
dhcp server, If I execute ipconfig the second time (or more times),
since my TP-LINK TL-R402M router will give an icmp(ping) packet before
DHCPOFFER,
the ipconfig will fail after it receive the packet and tries unpack
teh packet in packet_recv() since we
2011 Mar 28
5
[PATCH 1/3] Only peek and discard packets from specified device.
This patch fixes a bug on systems with multiple connected network devices.
As packet_peek uses all devices to receive data instead of a specific
device. As the return value was never reset it was possible that packets
from other devices were returned by packet_peek. That means that the
ifindex did not match any ifindex of the specified devices the packet was
never removed and packets for the
2014 Oct 11
0
[PATCH net-next RFC 3/3] virtio-net: conditionally enable tx interrupt
On Sat, 2014-10-11 at 15:16 +0800, Jason Wang wrote:
> We free transmitted packets in ndo_start_xmit() in the past to get better
> performance in the past. One side effect is that skb_orphan() needs to be
> called in ndo_start_xmit() which makes sk_wmem_alloc not accurate in
> fact. For TCP protocol, this means several optimization could not work well
> such as TCP small queue and
2000 Mar 23
1
Some "new" stuff for hist.R
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Send mail to mime@docserver.cac.washington.edu for more info.
--0-201145637-953833073=:7710
Content-Type: TEXT/PLAIN; charset=US-ASCII
Dear all,
I've been hacking on histograms the past couple of days. I wanted to do
two things, add
2003 Apr 29
0
[PATCH] Fix busy-looping behaviour in ipconfig
The ipconfig code does not drop incoming packets that it can't handle.
Since the packet socket sends ipconfig its own broadcast requests,
ipconfig has the unfortunate behaviour of eating 100% of the CPU time
when it does not receive an immediate response to its outgoing requests.
This patch fixes the problem, by ensuring that packets are dropped if
they are not handled. It also introduces a
2006 Feb 22
0
Re: [PATCH] Fix IPSec for Xen checksum offload packets (Jon Mason)
Hello Xen folks,
I have independently verified that this patch indeed fixes the issue (I
posted a message about the issue over the summer:
http://lists.xensource.com/archives/html/xen-devel/2005-08/msg00114.html).
I used changeset 8911 of xen-unstable.hg. The patch as written expects
kernel linux-2.6.16-rc2, but changeset 8911 uses kernel 2.6.16-rc4. I
verified that the patch works with
2014 Oct 14
0
[PATCH net-next RFC 3/3] virtio-net: conditionally enable tx interrupt
On Sat, Oct 11, 2014 at 03:16:46PM +0800, Jason Wang wrote:
> We free transmitted packets in ndo_start_xmit() in the past to get better
> performance in the past. One side effect is that skb_orphan() needs to be
> called in ndo_start_xmit() which makes sk_wmem_alloc not accurate in
> fact. For TCP protocol, this means several optimization could not work well
> such as TCP small
2013 Aug 15
12
[Bug 845] New: checking for LIBNFNETLINK... configure: error: Package requirements (libnfnetlink >= 0.0.41) were not met:
https://bugzilla.netfilter.org/show_bug.cgi?id=845
Summary: checking for LIBNFNETLINK... configure: error: Package
requirements (libnfnetlink >= 0.0.41) were not met:
Product: libnetfilter_queue
Version: unspecified
Platform: i386
OS/Version: RedHat Linux
Status: NEW
Severity: normal
2011 Mar 27
4
ipconfig problem if multiple devices are up
Hi,
it seems that ipconfig has a problem if multiple devices are up and
connected to the same network. It seems that it uses the wrong
socket/device index to compare it to incoming packet. To be more
precise, the packet gets discarded in do_pkt_recv as the ifindex from
state differs always from the incoming packet
To reproduce create two tap devices:
$ sudo tunctl -u uli -t tap0