* ipt_tcpmss_target: bad length
@ 2003-08-17 17:19 Laurens van Alphen
2003-08-18 3:03 ` Philip Craig
0 siblings, 1 reply; 2+ messages in thread
From: Laurens van Alphen @ 2003-08-17 17:19 UTC (permalink / raw)
To: netfilter
Hello all,
Today, I received this kernel log entry via e-mail:
Aug 17 14:19:17 filter0 kernel: ipt_tcpmss_target: bad length (472
bytes)
Using Google, I could not find a single useful meaning of this message.
Anyone?
Thanks in advance!
--
Laurens van Alphen
Keen on dots
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: ipt_tcpmss_target: bad length
2003-08-17 17:19 ipt_tcpmss_target: bad length Laurens van Alphen
@ 2003-08-18 3:03 ` Philip Craig
0 siblings, 0 replies; 2+ messages in thread
From: Philip Craig @ 2003-08-18 3:03 UTC (permalink / raw)
To: Laurens van Alphen; +Cc: netfilter
Laurens van Alphen wrote:
> Today, I received this kernel log entry via e-mail:
>
> Aug 17 14:19:17 filter0 kernel: ipt_tcpmss_target: bad length (472
> bytes)
>
> Using Google, I could not find a single useful meaning of this message.
Here's the comment from the source code which explains it:
/* Since it passed flags test in tcp match, we know it is is
not a fragment, and has data >= tcp header length. SYN
packets should not contain data: if they did, then we risk
running over MTU, sending Frag Needed and breaking things
badly. --RR */
In other words, SYN packets cannot have data, so the total length
of the packet must be the same as the tcp header length, otherwise
it is a bad length.
--
Philip Craig - philipc@snapgear.com - http://www.SnapGear.com
SnapGear - Custom Embedded Solutions and Security Appliances
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-08-18 3:03 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-08-17 17:19 ipt_tcpmss_target: bad length Laurens van Alphen
2003-08-18 3:03 ` Philip Craig
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox