ip6fw byte reporting error in v6
Pekka Savola
pekkas at netcore.fi
Wed Aug 8 02:04:11 PDT 2007
On Wed, 8 Aug 2007, Andrey V. Elsukov wrote:
> Pekka Savola wrote:
>> Fiddling around with ipfw, I noticed that 'ip6fw -ta l', under byte
>> reports, does not include the base IPv6 header in the length calculation
>> (hmm.. I wonder how it would calculate the length of extension-header
>> chained packet).
>>
>> IPv4 byte statistics, on the other hand, include the IPv4 header bytes.
>>
>> Is this a known problem? Is it a more general BSD kernel problem?
>
> Probably, you should use ipfw(8) instead of ip6fw(8). ip6fw was removed and
> it's functional moved into ipfw(8).
FWIW -- a rule generated by ipfw(8) counts the length correctly.
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
More information about the freebsd-ipfw
mailing list