From: "John R. Hogerhuis" <jhoger@pobox.com>
To: qemu-devel@nongnu.org
Subject: Re: [Qemu-devel] problem of SLIRP
Date: Wed, 08 Sep 2004 22:17:13 -0700 [thread overview]
Message-ID: <1094707033.31601.1400.camel@aragorn> (raw)
In-Reply-To: <1094706262.413fe4560f5d8@webaccess.umail.ucsb.edu>
On Wed, 2004-09-08 at 22:04, Ye Wen wrote:
> Hi,
>
> I'm wondering why on some machine I can work with SLIRP fine but on others, I
> can
> ping the 10.0.2.2 (router) well but can't access the Internet. Is it because of
> some firewall things?
User mode networking (Slirp) operates at the level of an unpriveleged
socket. That means that it can listen for TCP connections, make TCP
connections, send and receive UDP packets. Basically, you can use the
"port" based protocols.
>From an unpriveleged socket you cannot send raw IP packets. This
includes ICMP messages since ICMP operates at the IP layer, rather than
the ported protocol layer with TCP and UDP.
Ping is an ICMP message. So Slirp fakes a ping by sending a UDP packet
instead. So it is not ping. Your firewall may pass pings but not some
UDP packets. Hence the confusion.
What it comes down to, is don't use ping to test user mode networking,
since it doesn't do what you think. Using a web browser makes a lot more
sense, and is easier to understand the effects. The UDP fakery should
probably be removed since it doesn't really do what anyone thinks, and
therefore just confuses everyone.
Also, for networking problems in general your best bet is to do a
network trace on both the host and the guest, and you can see without
any doubt how the user mode networking scheme is horking up your
packets. I think QEMU is really putting Slirp through its paces, and
Slirp is actually going to be brought up to par in short order...
-- John.
prev parent reply other threads:[~2004-09-09 5:22 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-09-09 5:04 [Qemu-devel] problem of SLIRP Ye Wen
2004-09-09 5:17 ` John R. Hogerhuis [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1094707033.31601.1400.camel@aragorn \
--to=jhoger@pobox.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).