On Fri, Jan 05, 2001 at 07:21:36PM +0100, antirez wrote:
> When tcpdump receives UDP packets with the udp-len field < 8

When tcpdump receives a UDP packet with a udp-len field < 8 it should
find the host that sent it and send that host a packet to cause it to
melt down into a heap of slag, because RFC 768, "User Datagram
Protocol", says:

        Length  is the length  in octets  of this user datagram  including  this
        header  and the data.   (This  means  the minimum value of the length is
        eight.)

Unfortunately, as there's no IP "melt this host into a heap of slag,
because it's broken" packet, the best we can do is report an error in
the packet, as per your second suggestion:

>       if (ulen >= 8) {
>               (void)printf(" udp %u",
>                       (u_int32_t)(ulen - sizeof(*up)));
>       } else {
>               (void)printf(" udp (<8 %u)", (u_int32_t) ulen);
>       }
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to