Ethereal-dev: Re: [Ethereal-dev] Detecting TCP Timestamp PAWS DoS from tracefile

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Nathan Jennings <njen@xxxxxxxxxxxx>
Date: Sat, 06 Aug 2005 13:18:54 -0400
Alok wrote:

How does it work on simple SYNs then? :-(
If by "it" you're referring to NIC TCP checksum offloading, then I think it's irrelevant what type of TCP packet it is (SYN, FIN, RST, etc.); the TCP pcaket is sent to the OS without a checksum, which is where Ethereal gets it from (OS via libpcap). Therefore, you get incorrect checksum, since there's *no* checksum present. 

-Nathan