On Wed, Nov 05, 2003 at 08:30:15AM +0100, Udo A. Steinberg wrote: > > [ please CC: me on replies because I'm not subscribed to the netfilter list ] > > Hi, > > I'm currently running Linux-2.6.0-test9-bk7 compiled with gcc-3.3.2. > After upgrading from -test9 to -test9-bk7 I'm getting a lot of > > ipt_hook: happy cracking. > > messages. Google search revealed that this indicates broken packets being > sent out from the machine - and this is indeed so. > > The problem goes away, if I remove all my firewall rules, which looks to me > as if netfilter's --reject-with is the culprit. if your firewalls are removed, the respective 'happy cracking' code will never be run - and thus you'd never get that message. you could try to tcpdump-capture all outgoing traffic in order to find out which packets are broken. -- - Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
Attachment:
pgp00661.pgp
Description: PGP signature
