linux-kernel - Re: When does Linux drop UDP packets?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090604155741.GA8999@goodmis.org>
Date:	Thu, 4 Jun 2009 11:57:41 -0400
From:	Steven Rostedt <rostedt@...dmis.org>
To:	Philipp Reh <sefi@...-f-i.de>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: When does Linux drop UDP packets?

On Thu, Jun 04, 2009 at 04:53:47PM +0200, Philipp Reh wrote:
> Dear list,
> 
> I have the following setting in which a client that resides on the same
> physical network as a server wants to receive any UDP packet that
> arrives on any of its interfaces sent by that server.
> 
> The code sets the broadcast flag, calls bind to INADDR_ANY and
> uses recvfrom from there on.
> 
> Let's say the server resides in the subnet 192.168.6.255 and the
> client in 192.168.3.255. The server uses its real IP as the packet's
> sender ip (192.168.6.5).

You don't say what the client IP is. Let's assume that it is 192.168.3.1
for simplicity.

> 
> Now the first problem I've encountered is the following:
> If the client removes its default route and doesn't have any route
> pointing into the subnet the server is in, the packets get discarded
> (still tcpdump sees them).
> 

Are you saying that the server sent to 192.168.3.1 with source ip of
192.168.6.5 and the client did not see it?

> The second problem is that if the server uses the broadcast address as
> its sender address (255.255.255.255), the packets get always discarded
> (again, tcpdump sees them).

Again, what was the destination IP address?

> Now if the server fakes its sender address to be in the client's subnet,
> every packet arrives again.

So the only thing you change is the sender address?

What tools are you using to read the packets, and how do you know it is
dropped?

-- Steve

> 
> So my real question is:
> When does Linux discard packets and how can I prevent it from doing
> that?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/