How to use FreeBSD/Dummynet to fragment IP packets

From: Andrew Wenlang Zhu (Andrew.Zhu_at_hp.com)
Date: 10/01/04

  • Next message: Alan Cox: "Re: aio patch for review." 
    To: <freebsd-net@freebsd.org>
Date: Thu, 30 Sep 2004 17:43:11 -0700

    Hello:

    I use a freebsd system running Dummynet as a middle box to test network
    behavior. The setup likes this:

    System A ------------- FreeBSD with Dummynet ------------ System B

    Network traffic flows between System A and B, and the traffic is a mix of
    TCP, UDP and ICMP.

    I need the Dummynet system to fragment IP packet to a specified packet size.
    It is OK that all traffic get fragmented, but even it is better if I can
    specify a certain percentage of packet to be fragmented. I looked into
    Dummynet man page, but cannot find how to do packet fragmentation.

    Does any one know how to use Dummynet to fragment packet? Or any other open
    source software can achieve this?

    Thanks,

    Andrew

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Alan Cox: "Re: aio patch for review."

    Relevant Pages

    • Re: [Full-Disclosure] A new TCP/IP blind data injection technique?
      ... For example the BorderWare Firewall will not accept fragmented packets, ... Then pass or drop the packet. ... > should be fairly easy to turn this into a practical attack. ... The other fragment of Bob's packet carry the ...
      (Full-Disclosure)
    • Re: sshd hangs after SSH2_MSG_KEXINIT sent - Fedora Core 5 update
      ... For each network interface on both client and server set the MTU to 576, ... Only the first fragment has TCP port numbers. ... such devices should perform packet reassembly first so as to properly consider fragmented packets. ...
      (SSH)
    • Re: [Full-Disclosure] A new TCP/IP blind data injection technique?
      ... >data payload and within an established session, ... >Bob's packet exceeds the MTU somewhere en route (be it on some WAN ... fragment at the place you mention. ... All in all, an interesting attack vector, but I'm not sure how practical ...
      (Full-Disclosure)
    • Re: [FIX] dummynet breaks IP reassembly
      ... When forwarding fragmented packets through a dummynet pipe ... delivery sets ip_id of all fragments to different values, ... This bit was kept in the dummynet packet ...
      (freebsd-net)
    • dummynet and vr(4)/egress broken in 4.11 ?
      ... I've been using DUMMYNET for two years on RELENG_4. ... FYI, my packet filter is ipf, and I use ipfwfor traffic shaping ... I didn't changed my kernel configuration file so much since my last ... kernel upgrade, I juste added gif, IPSEC_FILTERGIF and vr. ...
      (freebsd-net)