From: Eliezer Croitoru <eliezer@ngtech.co.il>
To: 叶雨飞 <sunyucong@gmail.com>
Cc: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: UDP fragments , legitimate ?
Date: Mon, 17 Dec 2012 23:27:07 +0200 [thread overview]
Message-ID: <50CF8E2B.9040909@ngtech.co.il> (raw)
In-Reply-To: <CAJygYd1+1W7HqokAwgD2hi+ixeor+Eesz6BetbB-cScgsmd7NQ@mail.gmail.com>
The basic answer for that is your network usage\users.
A UDP application shouldn't care about MTU since the data Is suppose to
get from one end to the other.
Also notice that MTU size is not a must since there are also
Jumbo-frames which are big and many OS can fragment a packet from 1500
to 400 so this is not really something you can rely on.
If you have specific applications running in your environment you will
have no problem testing it.
Eliezer
On 12/14/2012 10:06 PM, 叶雨飞 wrote:
> This is more like a general networking question
>
> Is there legitimate use of UDP fragments in the wild? have you seen
> commonly used application sending/receving UDP packets that is large
> than MTU ? Is it safe to assume such traffic is nothing but dumb
> attacks?
>
> Thanks.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
prev parent reply other threads:[~2012-12-17 21:27 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-12-14 20:06 UDP fragments , legitimate ? 叶雨飞
2012-12-14 21:00 ` Brad Silva
2012-12-15 1:31 ` Amos Jeffries
2012-12-17 10:04 ` Michal Kubecek
2012-12-17 21:27 ` Eliezer Croitoru [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=50CF8E2B.9040909@ngtech.co.il \
--to=eliezer@ngtech.co.il \
--cc=netfilter@vger.kernel.org \
--cc=sunyucong@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.