Re: SOCK_RAW sockets and IPPROTO_AH

From: B ($B?_at_L@C#:H(B)
Date: 04/06/04

  • Next message: Chuck Swiger: "Re: FIN_WAIT_[1,2] and LAST_ACK" 
    Date: Wed, 07 Apr 2004 00:21:07 +0900
To: "Sebastien Petit" <spe@selectbourse.net>

    >>>>> On Tue, 6 Apr 2004 10:15:29 +0200,
    >>>>> "Sebastien Petit" <spe@selectbourse.net> said:

    > Unfortunatly, I can't use bpf/pcap solution because I must do some
    > setsockopts (like IP_MULTICAST_IF, IP_MULTICAST_TTL, IP_MULTICAST_ADD_MEMBER
    > etc.) and this can't be done on bpf/pcap.
    > When I'm using IPPROTO_VRRP (ip proto 112), All work fine (and other ip
    > proto type I think). What is the reason that SOCK_RAW don't work with
    > IPPROTO_AH (ip proto 51).
    > For me, it's an IP packet in two cases.

    Let me check, why do you have to include AH by the application in the
    first place? Is that related to the question you made the other day
    (attached below)?

                                            JINMEI, Tatuya
                                            Communication Platform Lab.
                                            Corporate R&D Center, Toshiba Corp.
                                            jinmei@isl.rdc.toshiba.co.jp

    attached mail follows:

    To: freebsd-net@freebsd.org
Date: Sun, 21 Mar 2004 12:26:13 +0100

    Hi Team,

    I want to use IPsec engine with AH Security Association and SPD on multicast
    destination adress. When I comment the setsockopt MULTICAST_IF option, all
    work fine and destination packets to the multicast adress have AH added
    before IP Header. But when I use the setsockopt MULTICAST_IF, no packets are
    sended from the interface (packet seems to be destroyed silently by kernel).
    Is there an issue about using MUTLICAST_IF option and IPsec ?

    Any help will be greatly appreciated.

    Regards,
    spe. 

    -- 
spe@selectbourse.net
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Chuck Swiger: "Re: FIN_WAIT_[1,2] and LAST_ACK"

    Relevant Pages

    • Re: SOCK_RAW sockets and IPPROTO_AH
      ... destination adress. ... But when I use the setsockopt MULTICAST_IF, ... sended from the interface (packet seems to be destroyed silently by kernel). ... To unsubscribe, ...
      (freebsd-hackers)
    • RE: kernel or ppp problem?
      ... There are no packet rcv errors or retransmissions ... The packet dumps from tcpdump are error free whether ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • RE: Large ICMP packets tracing/troubleshooting
      ... is not one of my IP addresses and therefore is out on the internet. ... packet is coming from your box and is trying to get out to the net. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ... Trouble? ...
      (Debian-User)
    • RE: How I can send a Packet to every Body on Internet
      ... How I can send a Packet to every Body on Internet ... to hit every IP on the internet? ... unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
      (RedHat)
    • Re: how to set time out in Casyncsocket
      ... How in the world is SetSockOpt is going to help him in what he want's to ... He needs to create an application timer (SetTimer), ... >> I will send a packet to a server,and wait the response data from the ...
      (microsoft.public.vc.mfc)