Hi Sorry to bother others. My program needs to tcpreplay some packets between switches. Since the trace is from raw IP, I converted them to ethernet packets. However, some of the original packets are truncated, and I found these packets are forwarded but missed. If I tcpreplay them and tcpdump the interface, I saw these packets become [Malformed packet]. My module even didnt capture a flow_in event for these packets. So, I am wondering, where are these packets actually dropped? Are they dropped by IP stack or are they dropped by authenticator module? Our control in nox is above or below IP stack?? Thanks.
_______________________________________________ nox-dev mailing list [email protected] http://noxrepo.org/mailman/listinfo/nox-dev_noxrepo.org
