On 2 Mar 01 at 1:05, J.R. de Jong wrote: > > This was probably the '&& 0' patched version :(. I've just sent a tcpdump > of 2.4.2-pre6 + the patch you mailed. It contains pieces like: Thanks. > 00:29:18.227882 0:d0:b7:18:62:e3 > Broadcast sap e0 ui/C > >>> IPX transport Data: (98 bytes) > [000] FF FF 00 D9 01 14 00 1D 80 22 FF FF FF FF FF FF ........ ."...... > [010] 05 53 00 1D 80 22 00 E0 29 09 CA 6A 05 53 00 1D .S...".. )..j.S.. > [020] 80 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ."...... ........ > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FC 03 ........ ........ > -- > 00:29:21.754475 0:d0:b7:18:62:e3 > Broadcast sap e0 ui/C > >>> Unknown IPX Data: (51 bytes) > [000] FF FF 00 66 01 14 00 1D 80 22 FF FF FF FF FF FF ...f.... ."...... > [010] 05 55 00 1D 80 22 00 00 C0 B8 E0 DC 05 55 00 1D .U...".. .....U.. > [020] 80 22 00 01 00 00 00 1E 06 01 53 4E 41 50 50 59 ."...... ..SNAPPY > [030] 02 02 06 ... > -- But WHY you are sending this packet? It must came here from somewhere... It looks like that 'if (intrfc != ifcs) continue;' line in patch does not work as expected, but without seeing incoming packet it is hard to guess what went wrong. And second packet is totally braindamaged: it has set netbios packet prop. type, but did not leave first 32bytes of packet unused... Is it DOOM advertising packet, or what? (do you know some 'snappy'?) Petr Vandrovec vandrove@vc.cvut.cz - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org