Re: Mangling TOS, or Precedence/SecurityOpts/Compartment?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

On Fri, 28 Oct 2005 karl@xxxxxxxxxxxxxx wrote:

> For the purposes of analysis, a third ?Invisible? Analysis machine is
> placed between Systems #1 and 2, and is cabled as shown in Figure 1, it
> has two Ethernet ports, and in general acts like a ?bridge? in that it
> possesses a ?Bypass Card?, which allows the Tool Server and the Controller
> Machine to pass traffic through it?s two Ethernet ports.
>
> One of the features of the Bypass card it contains, is that it physically
> shunts the copper Ethernet connections together when, say, power is cut.

Why do you use NAT on the analysis machine if you go into the trouble to
create such a specific card to mimic a direct-connected network?

Why do you want to play with the IP predecence field if you have got TCP
sequence number problems?

Why should the analysis machine terminate/initialize the TCP connections,
if it's a bridged setup and you can shunt/unshunt the cabling as you
wish?

Sorry, but the whole purpose of the setup and what you do is totally
unclear for me.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux