On Wed, 3 Oct 2007, Jozsef Kadlecsik wrote:
Hi,
On Wed, 3 Oct 2007, Krzysztof Oledzki wrote:
I also wondering if the code from nf_conntrack_proto_tcp.c is correct:
[...]
I think the code segment is correct. However, the end of the segment
is miscalculated by segment_seq_plus_len because the offset added to
'dataoff' by the get_l4proto function of IPv4/IPv6 is not taken into
account. Please check whether the patch below fixes it:
Thank you. Currently I am traveling so I do not have direct access to this
host but I will test it ASAP.
Signed-off-by: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx>
diff -urN --exclude-from=/usr/src/diff.exclude linux-2.6.23-rc4-orig/net/netfilter/nf_conntrack_proto_tcp.c linux-2.6.23-rc4-tcp_win/net/netfilter/nf_conntrack_proto_tcp.c
Does this same error exist in 2.6.22?
BTW: what is your opinion about
net.netfilter.nf_conntrack_tcp_timeout_time_wait?
Best regards,
Krzysztof Olędzki
