libipq does not shorten package

libipq does not shorten package

[David Vogt]

Dear all,

I already posted this question on netfilter mailing list, however, I
got no response, so maybe someone around here can help me.

I am using iptables and queue packets to user space. Packets are
either augmented (with a signature) or shortened (removal of
signature). The augmentation works.
 However, when removing the signature, the resulting packet contains
the correct data, but its overall size is equal to the original
(signed) packet. (i.e. original packet size: 83, signed packet size:
163)

 I checked this using ethereal on the receiving machine, which lists
packets with the additional bytes (163-83=79) as trailer for the
ethernet frame. (So, actually, the packet is processed correclty on
the other side, however, the additional bytes seem odd to me)

I am using iptables 1.2.9 which is - admittedly - not the newset
available, maybe there already has been a fix concerning this? I
haven't updated iptables yet, since the target platform is somewhat
limited and not fully under my control.

 Any help would be great.

Re: libipq does not shorten package

[Patrick McHardy]

David Vogt wrote:
> Dear all,
> 
> I already posted this question on netfilter mailing list, however, I
> got no response, so maybe someone around here can help me.
> 
> I am using iptables and queue packets to user space. Packets are
> either augmented (with a signature) or shortened (removal of
> signature). The augmentation works.
>  However, when removing the signature, the resulting packet contains
> the correct data, but its overall size is equal to the original
> (signed) packet. (i.e. original packet size: 83, signed packet size:
> 163)

Thomas Graf posted a patch that should fix this a couple of days
ago, check the list archives.

Re: libipq does not shorten package

[David Vogt]

2006/3/9, Patrick McHardy <kaber@trash.net>:
> David Vogt wrote:
> > I am using iptables and queue packets to user space. Packets are
> > either augmented (with a signature) or shortened (removal of
> > signature). The augmentation works.
> >  However, when removing the signature, the resulting packet contains
> > the correct data, but its overall size is equal to the original
> > (signed) packet. (i.e. original packet size: 83, signed packet size:
> > 163)
>
> Thomas Graf posted a patch that should fix this a couple of days
> ago, check the list archives.
>

I haven't seen that patch, altough I have been reading netfilter-devel
for quiete some time now. Sorry for the inconvenience.

D.