Ethereal-dev: RE: [Ethereal-dev] TCP Framentation bug?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Fri, 28 Feb 2003 16:45:32 +0100
Agreed but only partially. If the trace is taken on some SUN Solaris
machines from which the TCP traffic is originating, then all sent TCP
packets will probably have a bad TCP checksum.

It would be better to provide a preference parameter in the TCP handler
allowing us to choose between ignoring and considering the TCP checksum
errors altogether.

Regards,

Olivier

> -----Original Message-----
> From: Devin Heitmueller [mailto:dheitmueller@xxxxxxxxxxx]
> 
> Shouldn't this be based in part on the result of the TCP checksum?  If
> the TCP checksum validation fails, the peer is going to discard the
> packet and wait for a retransmit.  In this case, we should probably be
> dissecting the second packet, not the first.  There is little value in
> attempting to dissect a packet that fails the TCP checksum, 
> as it could
> contain complete garbage.