-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Guy" == Guy Harris <[EMAIL PROTECTED]> writes:
Guy> linux lover wrote:
>> Actually i am in implementation of new protocol like IPSEC
>> protocol which adds NEW IP header in front of AH Header
>> i.e. consider packet structure of ipsec TCP+IP1+AH+IP2+ETHERNET
Guy> Right-to-left is a bit odd there - do you mean that the packet
Guy> begins with an Ethernet (or PPP or 802.11 or...) header,
Guy> followed by an IP header, followed by an AH header, followed by
Guy> your added IP header, followed by the payload of that IP
Guy> header?
Based upon what he wrote above, it is just AH in tunnel mode.
Guy> You'd have to modify the IPv4 and IPv6 dissectors to recognize
Guy> that case and call the IP dissector.
Guy> What indicates that there's an IP header after the AH header?
Guy> A special value in the "next header" field of the AH header? -
maybe he has to edit print-ah.c.
- --
] Michael Richardson Xelerance Corporation, Ottawa, ON | firewalls [
] mcr @ xelerance.com Now doing IPsec training, see |net architect[
] http://www.sandelman.ca/mcr/ www.xelerance.com/training/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys
iQCVAwUBQef7tYqHRg3pndX9AQEJJgQAvMyTx/9C+CbecnCA1nx5ufyFRq8eHtPe
FjweU6HSl4dRkYhMD3aUhrjPIgh5F4TZ7cx8pECs2Ol0mpHJ6fGm8zYx6nQcqg3H
zbDE+hLCtQlJ9X1s8NpC3oLGczLL5LzuqRPmdbLzEVF6eoCfX05J9+Zv5+o8QxVA
VDFm9Pe9T4o=
=ShlU
-----END PGP SIGNATURE-----
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
