search for: ip_input

Hi, secfolks. While reading ip_input.c I have met following lines: ;------------------------------------------------- /* 127/8 must not appear on wire - RFC1122 */ if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET)...

...b_trace_self_wrapper() at db_trace_self_wrapper+0x2a panic() at panic+0x182 vm_page_unwire() at vm_page_unwire+0x84 sf_buf_mext() at sf_buf_mext+0x3c mb_free_ext() at mb_free_ext+0x99 sbdrop_internal() at sbdrop_internal+0x1e8 tcp_do_segment() at tcp_do_segment+0x1512 tcp_input() at tcp_input+0x7f7 ip_input() at ip_input+0xa8 ether_demux() at ether_demux+0x1b4 ether_input() at ether_input+0x1bb bge_intr() at bge_intr+0x3ca ithread_loop() at ithread_loop+0x180 fork_exit() at fork_exit+0x11f fork_trampoline() at fork_trampoline+0xe --- trap 0, rip = 0, rsp = 0xffffffffea28fd30, rbp = 0 --- Uptime: 36m47...

...sbdrop_locked (sb=0xc20aca84, len=1) at /usr/src/sys/kern/uipc_socket2.c:1157 #4 0xc06d3d93 in sbdrop (sb=0xc20aca84, len=0) at /usr/src/sys/kern/uipc_socket2.c:1208 #5 0xc0748a7d in tcp_input (m=0xc1c09100, off0=-1039845124) at /usr/src/sys/netinet/tcp_input.c:1201 #6 0xc0740147 in ip_input (m=0xc1c09100) at /usr/src/sys/netinet/ip_input.c:778 #7 0xc07171ff in netisr_processqueue (ni=0xc09ca4f8) at /usr/src/sys/net/netisr.c:236 #8 0xc07174be in swi_net (dummy=0x0) at /usr/src/sys/net/netisr.c:349 #9 0xc06740e5 in ithread_loop (arg=0xc19c3280) at /usr/src/sys/kern/kern_i...

...- - - - - - - - - - - - - - - - - - - I find a posting (from many years ago) [0], which suggests that this happens in fib_validate_source() (in fib_frontend.c) which is only called by route.c. I tried following the diagram by Mathieu Lafon to see if fib_validate_source() is called in ip_rcv() (in ip_input.c), but I don''t read C very well, so I could well be missing where the rp_filter validation is occurring. If I understand the path correctly, the functions are traversed in this order (from most deeply nested first): fib_validate_source() ip_route_input_slow() ip_route_input() i...

Hi! I'm trying to increase security on my FreeBSD 4.8 firewall/DSL router/VPN router. My problem is with firewalling the VPN part. I'm using a tunnel to a RedHat 7.1 box running FreeS/WAN. This tunnel allows traffic from my internal net (172.17.0.0/24) to that box only: spdadd 172.17.0.0/24 $REDHAT/32 any -P out ipsec esp/tunnel/$MYADDR-$REDHAT/unique; spdadd $REDHAT/32 172.17.0.0/24

Whilst trying out some D to get an insight into what is the most common reason for a given function to return, I have bumped into an error I don''t understand. The first take on what I was trying to do was: # dtrace -n ''fbt:ip:ip_input:return{@home[arg0] = count();}'' and all was well. The next step was: # dtrace -n ''fbt:ip::return{@home[strjoin(probefunc,(string)arg0)] = count();}'' but the output was not quite so friendly: dtrace: description ''fbt:ip::return'' matched 1653 probes dt...

Hello, Since FreeBSD 9.1 I have strange problems with the distribution. Some servers are rebooting without any kernel panic, instanly. First i thought it's a problem with my KVM system, but one of my FreeBSD under a Dell R210 have the same problem. The servers concerned are now: - Monitoring server - LDAP test server - Some other servers, randomly (not in production). First i thought it's

...ut 40M/s, the windows machines don''t report checksum error, but v40z report checksum error, using dtrace we found following stack during checksum error: dtrace: description ''udpInCksumErrs '' matched 2 probes CPU ID FUNCTION:NAME 2 842 ipcl_tcpconn_cache:udpInCksumErrs ip`ip_input+0x729 dls`i_dls_link_ether_rx+0x153 mac`mac_rx+0x46 e1000g`e1000g_intr_work+0x1a8 e1000g`e1000g_intr+0x3c unix`av_dispatch_autovect+0x78 unix`intr_thread+0x50 2 842 ipcl_tcpconn_cache:udpInCksumErrs ip`ip_input+0x729 dls`i_dls_link_ether_rx+0x153 mac`mac_rx+0x46 e1000g`e1000g_intr_work+0x1a8 e100...

...allow marking invalid; allow for static mboxes are available in the git repository at: git://github.com/geneC1/syslinux.git lwip-undiif-fix-for-hpa Gene Cumm (4): lwip: undiif: Fix #error typo lwip: undiif: Fix debug option addressing in update_arp_entry() lwip:undiif: Use tcpip_input() rather than ethernet_input()/ip_input() lwip:undiif: Add interface with tcpip_input() callback core/lwip/src/netif/undiif.c | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-) -- -Gene

Any chance of this being implemented in fbsd? Could be usefull ;-) ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt -- :{ andyf@speednet.com.au Andy Farkas System Administrator Speednet Communications http://www.speednet.com.au/

...is much more likely to be where the problem is.. >>>> >>>> >>> I'll have to set this up to test it. >> >> The ttl exceeded is triggered from one of two places. Either >> netinet/ip_fastfwd.c if fast_forwarding is enabled or in >> netinet/ip_input.c. Look for the code relating to IPTTLDEC. This isn't >> your problem though... If ttl were not being decremented, the packet >> would just be forwarded on to the next hop (IP_STEALTH), which would >> just make the firewalls invisible. The fact that you are seeing * * * &g...

...d 100001 td 0xffffff007b959be0 propagate_priority() at propagate_priority+0x66 turnstile_wait() at turnstile_wait+0x20f _mtx_lock_sleep() at _mtx_lock_sleep+0x89 sf_buf_mext() at sf_buf_mext+0xa3 mb_free_ext() at mb_free_ext+0x64 sbdrop_locked() at sbdrop_locked+0xb8 tcp_input() at tcp_input+0x255e ip_input() at ip_input+0x100 netisr_processqueue() at netisr_processqueue+0x78 swi_net() at swi_net+0x14d ithread_loop() at ithread_loop+0x162 fork_exit() at fork_exit+0x86 fork_trampoline() at fork_trampoline+0xe --- trap 0, rip = 0, rsp = 0xffffffffb18ecd00, rbp = 0 --- db> Online 00:33show reg cs...

Hi. On my FreeBSD 4.8 configured IPFW2+IPF+IPNAT and I use them all: - IPFW - traffic accounting, shaping, balancing and filtering; - IPFilter - policy routing; - IPNAT - masquerading. I want to know, how IP-packets flow through all of this components? What's the path? incoming: IPFW Layer2 -> IPFW&Dummynet -> IPNAT -> IPFilter ? outgoing: IPFW Layer2 ->

I will shortly be replacing a couple of proprietary VPN boxes with a FreeBSD solution. Section 10.10 of the Handbook has a detailed description of how to do this. However I remember a lot of discussion about a year ago about whether the gif interface was necessary to set up VPNs like this or whether it was just a convenience, for "getting the routing right". A number of people said

...at_extern.h at_proto.c > sys/netgraph/netflow netflow.c > sys/netinet if_atm.c if_ether.c in_gif.c in_mcast.c > in_pcb.c in_pcb.h in_rmx.c in_var.h > ip_fastfwd.c ip_fw.h ip_fw2.c ip_icmp.c > ip_input.c ip_mroute.c ip_mroute.h > ip_options.c ip_output.c ip_var.h > raw_ip.c sctp_os_bsd.h tcp_input.c > tcp_subr.c tcp_syncache.c > sys/netinet6 in6.c in6_ifattach.c in6_rmx.c nd6_rtr.c > sys/neti...

...r any processed messages the corresponding connp looses one reference (and explain why this is done this way). 2. 581 * ''interrupt'' is set when the packet is coming from below 582 * either through a soft ring worker thread that directly 583 * called ip_input() (tag == SQTAG_IP_INPUT_RX_RING) or 584 * when we are being invoked from a NIC interrupt context. This seems like a hack. First of all, why is processing by poll thread should be treated in the same way as the real interrupt handler (which is quite different beast)? Second, I don'...

...------------- And the patch: ------[Begin] -- Helu Linux ------------------------------------------------- --- ip_fragment.c Mon Nov 10 14:58:38 1997 +++ ip_fragment.c.patched Mon Nov 10 19:18:52 1997 @@ -12,6 +12,7 @@ * Alan Cox : Split from ip.c , see ip_input.c for history. * Alan Cox : Handling oversized frames * Uriel Maimon : Accounting errors in two fringe cases. + * route : IP fragment overlap bug */ #include <linux/types.h> @@ -578,6 +579,22 @@...

...keups. pxe: Cleanup interrupt handling making it reliabe and in spec pxe: Neuter pxe_idle_init undiif: Unneeded debugging functions. Gene Cumm (13): lwip: undiif: Fix #error typo lwip: undiif: Fix debug option addressing in update_arp_entry() lwip:undiif: Use tcpip_input() rather than ethernet_input()/ip_input() lwip:undiif: Add interface with tcpip_input() callback cptime.c32: Simple module to test download rates prdhcp.c32: Print DHCP packets cptime.c32: Move to modules; include in Makefile cptime.txt: AsciiDoc manpage for cptime.c32...

...= 0xffffffff814deaf8 tss = 0xffffffff814deae8 spin locks held: db:0:pcpu> bt Tracing pid 12 tid 100069 td 0xfffffe00264b8000 kdb_enter() at kdb_enter+0x3b panic() at panic+0x1d1 soabort() at soabort+0x99 syncache_expand() at syncache_expand+0x306 tcp_input() at tcp_input+0x1033 ip_input() at ip_input+0xbd netisr_dispatch_src() at netisr_dispatch_src+0x152 ether_demux() at ether_demux+0x17d ether_nh_input() at ether_nh_input+0x20e netisr_dispatch_src() at netisr_dispatch_src+0x152 ether_demux() at ether_demux+0x86 ether_nh_input() at ether_nh_input+0x20e netisr_dispatch_src() at ne...

In crossbow, each mac_srs has a kernel thread called "mac_rx_srs_poll_ring" to poll the hardware and crossbow will wakeup this thread to poll packets from the hardware automatically. Does crossbow provide any method to disable the polling mechanism, for example disabling the this kernel thread? Thanks Zhihui -------------- next part -------------- An HTML attachment was scrubbed... URL: