[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 01363) Ping with large packets and ftp

Hello to everyone.


The following situation:

- The kernel compiles, boots and seems to run stable (20020401-snapshot, full package, Kernel 2.4)
- The configuration with your scripts works without errors. 
- I´m using the simple scenario outlined in file "Ipsec, v1.5 2002/02/15" with host A and B.

1. Ping6 with normal packetsize works fine. If I increase the packet size (ping6 -s xxxx) over 1398 bytes, I get no replies. Ethereal on an independent PC shows
	ESP	ESP(SPI=0x....)
	IPv6	IPv6 fragment (nxt=ESP ...)

2. If I try to establish an ftp-session (from A to B) either the PC A freezes or immediatelly reboots. The other PC (B) does not seem to be harmed. Again Ethereal shows a maximum of one ESP packet going from A to B. This behaviour is with inetd and xinetd. Transmission of UDP packets (i.e. VIC) works.

I presume, both bugs have to do with fragmentation of data and packetsize. Is there a config-file I did not discover yet?


I am using a Toshiba SatPro 4600, 1 GHz, 256 MB running SuSE 7.2.

Thanks in advance.

JRB

********************************************
Industrieanlagen-Betriebsgesellschaft mbH
Jürgen R. Bittner
IK43 
Einsteinstrasse 20
D-85521 Ottobrunn
Telefon: +49-(0)89-6088-3127
Fax:     +49-(0)89-6088-4029
e-Mail:  jbittner@xxxxxxx
www:     www.iabg.de
********************************************