Re: cttest-0.3 (conntrack hashing)

2002-07-08 Thread Patrick Schaaf
Don, My friend the crypto expert told me that crc is easy to attack, and suggested ABCD(EF) because it has the right properties to resist attack. It would take more work for me to demonstrate that crc is bad, and to better understand ABCD and possibly adjust it, but just on the basis of

Re: cttest-0.3 (conntrack hashing)

2002-07-08 Thread Joakim Axelsson
I analyzed the part res ^= (res 24); res ^= (res 8); a little more in the rt_hash. What it really does is that it applies the hi bits in the 32bit integer on the low ones. This means that we wont just throw them away when we apply the %-operation on it. This is what keeps the good distribution.

Re: cttest-0.3 (conntrack hashing)

2002-07-08 Thread Patrick Schaaf
big-endian machine: #uname -a SunOS licia.dtek.chalmers.se 5.8 Generic_108528-14 sun4u sparc SUNW,Sun-Fire-280 http://www.dtek.chalmers.se/~d97gozem/cttest/0.4/ All graphs here look about equally good. I dont know if there is a bug somewhere in cttest that might do this. I don't

Re: cttest-0.5

2002-07-08 Thread Patrick Schaaf
Now there is http://bei.bof.de/cttest-0.5.tar.gz and an example presentation at http://bei.bof.de/ex4/ As nobody requested the tarball yet, I've remade it with the latest 64 bit ABCDEF code from Don. I also remade the ex4/ pictures, in the abcd series, Don's new hash is named abcd_long. Looks

Re: cttest-0.3 (conntrack hashing)

2002-07-08 Thread Don Cohen
Henrik Nordstrom writes: On Monday 08 July 2002 23.30, Don Cohen wrote: I figure it hardly matters whether I do the analogous thing for proto, since it's so short. Actually you could consider proto almost a constant.. I don't think you really gain anything by obfuscating this..

connection loss/pickup

2002-07-08 Thread Don Cohen
(Trying to think about something OTHER than hashing!) The recent message about something in conntrack that does not have to be atomic reminds me of a question. I'm about to implement something that cannot afford to lose track of connections. Is conntrack now suitable for such a thing? If

IMHO - Re: Deleting Connection Tracking information

2002-07-08 Thread Allen
On Monday 08 July 2002 11:43 am, Antony Stone wrote: On Monday 08 July 2002 1:31 pm, Tsachi Sharfman wrote: snips However, a more serious problem is what do you possibly want to change in the NAT rules for a connection which is currently in progress, which isn't going to seriously upset

Multicast, IGMP, and NAT

2002-07-08 Thread Amir Khandani
Hi, This may not be very relevant to the type of discussions done via this mailing list but doesn't heart to ask anyway. So here it goes: I have a laptop running linux and configure as the gateway between a local subnet and the our corporate network. I will call this the Linux Gateway from this