netdev - malformed captured packets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 28 Aug 2007 18:11:31 +0200
From:	Toralf Förster <toralf.foerster@....de>
To:	netdev@...r.kernel.org
Subject: malformed captured packets

I use at home an DSL connection (stable Gentoo system),
current kernel is 2.6.22-gentoo-r5.

I attached 2 pcap files with the communication of the KDE program kscd with the
CDDB server freedb.org, sniffed from interface ppp0 and eth0 respectively.

The sniffed network stream over the ppp0 interface looks _always_ fine whereas
the sniffed packets from the eth0 always looks bad :-(

I don't undestand why the ppp0 stream is ok, whereas the eth0 stream has always
a malformed package (eg #13 in kscd_eth0.pcap) which contains the content of the CD.
And I'm really confused about the fact, that within a LAN I did not have a
malformed packet.

I discussed it
here http://www.wireshark.org/lists/wireshark-users/200707/msg00187.html
and here http://bugzilla.kernel.org/show_bug.cgi?id=8793 and many different
places in the past but w/o success.

Any explanation are appreciated.

-- 
MfG/Sincerely

Toralf Förster
pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3

Download attachment "kscd_eth0.pcap" of type "application/octet-stream" (5348 bytes)

Download attachment "kscd_ppp0.pcap" of type "application/octet-stream" (5882 bytes)

Download attachment "signature.asc " of type "application/pgp-signature" (190 bytes)