I did this for the ietf ids sensor and I haven't see any having run it since noon.
udp[6:2] == 0 joel Lars Eggert wrote: > On 2009-7-28, at 10:37, Christopher Morrow wrote: >> apologies, I had a tcpdump expr fail :( I do see DNS though with out >> checksums, I'll go dig for some more NFS or other UDP on my test >> host(s). > > Just as a hint: you'll need to look at inbound traffic if your NIC does > checksum offloading, because chksum=0 on output is a hint to the NIC to > overwrite it before transmission. > > Lars > > > ------------------------------------------------------------------------ > > _______________________________________________ > Behave mailing list > beh...@ietf.org > https://www.ietf.org/mailman/listinfo/behave -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
