ICMP need to frag

Jeremie Le Hen jeremie at le-hen.org
Mon May 23 11:22:39 PDT 2005


Hi Dave,

> >    - Why does Path MTU Discovery doesn't work here ?  I'm pretty
> >      sure that the ICMP Need-To-Frag packets are not filtered since
> >      I am able to see them outgoing from the Ethernet network card
> >      on the RELENG_4 router.
> >
> 
> Does SSH use IPSEC AH ?
> Just guessing here, but maybe the problems is (from icmp_input()):
> 
>                 /*
>                  * XXX if the packet contains [IPv4 AH TCP], we can't make a
>                  * notification to TCP layer.
>                  */
>                 ctlfunc = inetsw[ip_protox[icp->icmp_ip.ip_p]].pr_ctlinput;
>                 if (ctlfunc)
>                         (*ctlfunc)(code, (struct sockaddr *)&icmpsrc,
>                                    (void *)&icp->icmp_ip);

What do you mean in "does SSH use IPSec AH ?" ?  I've never heard of
such a thing.  I think the code you pasted refers to IPSec transport
mode, but I'm afraid that it's not related to my problem of Path MTU
Discovery not working.

Regards,
-- 
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >


More information about the freebsd-net mailing list