[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    Re: [Snort-devel] loopback network 127.0.0.0/8
From:       Martin Roesch <roesch () sourcefire ! com>
Date:       2001-07-30 3:12:42
[Download RAW message or body]

No problem, I was pretty sure I cleared this one up.  We have to shift
the packet two bytes to the right in the frag rebuild code under Solaris
or we get bus errors (gotta love the Sparc's infatuation with those
32-bit alignments), and I initially added it and then forgot to move one
of the code segments over under non-Solaris OS's.  

    -Marty

Phil Wood wrote:
> 
> Marty,
> 
> My humble apologies.  The problem with the loopback packets is fixed
> in Version 1.8.1-beta5 (Build 59)
> 
> I was running Version 1.8.1-beta3 (Build 47) on the system that generated
> the bogus re-assembled fragments!
> 
> I just tested using:
> 
>    ping -f -s 1500 -c 1000 192.16.20.241
> 
> build 47 generated the phony packets, build 59 didn't.
> 
> Sorry,
> 
> Phil

--
Martin Roesch
roesch@sourcefire.com
http://www.sourcefire.com - http://www.snort.org

_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
http://lists.sourceforge.net/lists/listinfo/snort-devel

[prev in list] [next in list] [prev in thread] [next in thread]