netdev - Re: Bogus frames transmitted with r8169 & fragmentation & large mtu

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120215232303.GB31463@electric-eye.fr.zoreil.com>
Date:	Thu, 16 Feb 2012 00:23:03 +0100
From:	Francois Romieu <romieu@...zoreil.com>
To:	Eric Dumazet <eric.dumazet@...il.com>
Cc:	Nick Bowler <nbowler@...iptictech.com>, netdev@...r.kernel.org,
	Realtek linux nic maintainers <nic_swsd@...ltek.com>,
	Hayes Wang <hayeswang@...ltek.com>
Subject: Re: Bogus frames transmitted with r8169 & fragmentation & large mtu

Eric Dumazet <eric.dumazet@...il.com> :
> Le mercredi 15 février 2012 à 11:37 -0500, Nick Bowler a écrit :
[...]
> > Let me know if you need any more info,
> 
> Interesting, but 2nd frame is also corrupted (not at the start but in
> the middle)

And the corruption looks like a packet header. Compare :

0000  00 25 11 8c 1c 3d bc ae  c5 27 19 6f 08 00 45 00   .%...=.. .'.o..E.
0010  23 24 5d 69 20 00 40 01  46 a5 c0 a8 09 41 c0 a8   #$]i .@. F....A..
0020  09 39 08 00 d9 b6 0c 6b  00 01 d1 d2 3b 4f ad 69   .9.....k ....;O.i
0030  06 00 42 42 42 42 42 42  42 42 42 42 42 42 42 42   ..BBBBBB BBBBBBBB

with :

(lots of 42)
1f00  00 25 11 8c 1c 3d bc ae  c5 27 19 6f 08 00 45 00   .%...=.. .'.o..E.
1f10  0c 1c 5d 69 0d 26 40 01  70 87 c0 a8 09 41 c0 a8   ..]i.&@. p....A..
                 (^^^^^ fragment offset 6694)
1f20  09 39 42 42 42 42 42 42  42 42 42 42 42 42 42 42   .9BBBBBB BBBBBBBB

Mac addresses and ip addresses match.

Hayes, what is the story with ICMP packets and IP flags ?

-- 
Ueimor
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html