>>>>> On Tue, 6 Apr 2004 10:15:29 +0200,
>>>>> "Sebastien Petit" <[EMAIL PROTECTED]> said:
> Unfortunatly, I can't use bpf/pcap solution because I must do some
> setsockopts (like IP_MULTICAST_IF, IP_MULTICAST_TTL, IP_MULTICAST_ADD_MEMBER
> etc.) and this can't be done on bpf/pcap.
> When I'm using IPPROTO_VRRP (ip proto 112), All work fine (and other ip
> proto type I think). What is the reason that SOCK_RAW don't work with
> IPPROTO_AH (ip proto 51).
> For me, it's an IP packet in two cases.
Let me check, why do you have to include AH by the application in the
first place? Is that related to the question you made the other day
(attached below)?
JINMEI, Tatuya
Communication Platform Lab.
Corporate R&D Center, Toshiba Corp.
[EMAIL PROTECTED]
--- Begin Message ---
Hi Team,
I want to use IPsec engine with AH Security Association and SPD on multicast
destination adress. When I comment the setsockopt MULTICAST_IF option, all
work fine and destination packets to the multicast adress have AH added
before IP Header. But when I use the setsockopt MULTICAST_IF, no packets are
sended from the interface (packet seems to be destroyed silently by kernel).
Is there an issue about using MUTLICAST_IF option and IPsec ?
Any help will be greatly appreciated.
Regards,
spe.
--
[EMAIL PROTECTED]
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
--- End Message ---
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
