[reviving an old thread] > > I think we should keep the default with strict checksum checking, > > especially now that we have the new script that tells users if they seem to > > have invalid checksums. I would rather push people down the right path as > > much as possible. > > My thoughts too.
I'm struck by how often new users continue to get bitten by needing -C due to checksum offloading. Would it work to provide checksum auto-sensing? Something like: if upon reading from an interface the very first packet has a checksum error, assume that -C is needed; verify this, though, for the next N packets, just to be safe. Vern _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev