netdev - Re: "ping6 -M do" fragments packets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 12 Oct 2007 18:00:12 +0200
From:	Patrick McHardy <kaber@...sh.net>
To:	Chuck Anderson <cra@....EDU>
CC:	netdev@...r.kernel.org
Subject: Re: "ping6 -M do" fragments packets

Chuck Anderson wrote:
> I'm not subscribed, so please Cc: me on any responses.  Thanks.
> 
> According to the man page, ping6 should support the "-M do" option so 
> never fragment packets, which I'd like to use for testing the MTU of a 
> path.  This option works fine for IPv4 ping, but doesn't work with 
> IPv6 ping6.  I can guarantee that I don't have an MTU of 63356 :-)
> 
> 
>>ping6 -M do -s 65527 www.kame.net
> 
> Sure enough, wireshark reports fragments:
> 
> No.     Time        Source                Destination           Protocol Info
>       1 0.000000    2001:468:616:8c9:213:72ff:fe74:da15 2001:200:0:8002:203:47ff:fea5:3085 IPv6     IPv6 fragment (nxt=ICMPv6 (0x3a) off=0 id=0x79)
>       2 0.000007    2001:468:616:8c9:213:72ff:fe74:da15 2001:200:0:8002:203:47ff:fea5:3085 IPv6     IPv6 fragment (nxt=ICMPv6 (0x3a) off=1448 id=0x79)


Are you using nf_conntrack_ipv6?
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html