ip6fw byte reporting error in v6

Pekka Savola pekkas at netcore.fi
Wed Aug 8 02:04:11 PDT 2007


On Wed, 8 Aug 2007, Andrey V. Elsukov wrote:
> Pekka Savola wrote:
>>  Fiddling around with ipfw, I noticed that 'ip6fw -ta l', under byte
>>  reports, does not include the base IPv6 header in the length calculation
>>  (hmm.. I wonder how it would calculate the length of extension-header
>>  chained packet).
>>
>>  IPv4 byte statistics, on the other hand, include the IPv4 header bytes.
>>
>>  Is this a known problem?  Is it a more general BSD kernel problem?
>
> Probably, you should use ipfw(8) instead of ip6fw(8). ip6fw was removed and 
> it's functional moved into ipfw(8).

FWIW -- a rule generated by ipfw(8) counts the length correctly.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the freebsd-ipfw mailing list