Re: [BEHAVE] UDP zero checksums and v4 to v6 translators

[Joel Jaeggli <joelja at bogus.com>]

I did this for the ietf ids sensor and I haven't see any having run it
since noon.

udp[6:2] == 0

joel

Lars Eggert wrote:
> On 2009-7-28, at 10:37, Christopher Morrow wrote:
>> apologies, I had a tcpdump expr fail :( I do see DNS though with out
>> checksums, I'll go dig for some more NFS or other UDP on my test
>> host(s).
> 
> Just as a hint: you'll need to look at inbound traffic if your NIC does
> checksum offloading, because chksum=0 on output is a hint to the NIC to
> overwrite it before transmission.
> 
> Lars
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Behave mailing list
> Behave at ietf.org
> https://www.ietf.org/mailman/listinfo/behave