On Fri, 2007-08-03 at 11:49 +0100, Andy Green wrote: > ''Because if you have both a hard monitor and a regular interface > (monitor_during_oper allowed) then we will never check the CRC on frames > that enter the networking path and can get corrupted TCP packets in etc.'' > > If the rest of the networking stack didn't trust the packet anyway and > confirms the IP-level checksum, then it can make its own opinion about > the packet. Maybe it helps if I add that the FCS covers more of the packet than the IP checksum; hence, if the FCS fails due to a bit in the area the IP checksum does not cover we will not ACK the packet and get a retransmission, but the IP checksum will check out as good and we'll have a duplicate packet. johannes
Attachment:
signature.asc
Description: This is a digitally signed message part
