Subject: Re: skb_checksum_help

From: David Coulson <[email-masked]>
Date: Sun, 23 Jan 2005 20:31:02 -0500

Thomas Graf wrote:

> Protocol: 17 (UDP)
> Checksum: 0x7b08
> Source: 211.32.117.11 (korean ip)
> Destination: 10.1.1.5
> 
> [0] The originator of this packet is likely a BSD based
> UNIX box. It is unlikely that it dropped to 49 from 128
> which I think is the base TTL windows uses. Only guessing
> though.

Looks like a DNS packet. AFAIK, 53 is the only UDP port I NAT through 
from the outside to 10.1.1.5. No idea if that really matters or not, 
with respect to the contents of the IP packet.

David

-- 
David J. Coulson
email: [email-masked]
web: http://www.davidcoulson.net/
phone: (216) 920-3100 / (216) 258-4942