> On 9 Nov 2018, at 15:42, blankspot <[email protected]> wrote:
> 
> hi, vpp dev
> 
> I am doing some fragment test using vpp 18.07.  IP4 Packet with offset 8 is 
> dropped with trace error: 
> 
> 00:20:04:661292: error-drop
>   ip4-input: ip4 fragment offset == 1
> 
> I find the comment in ip4_input.h: /* Drop fragmentation offset 1 packets. */
> 
> Does someone know why? 

Because it’s a tiny fragment attack?

Cheers 
Ole

> 
> Best regards,
> 
> yonggong
> 
> [email protected]
>      
> 签名由 网易邮箱大师 定制
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> 
> View/Reply Online (#11183): https://lists.fd.io/g/vpp-dev/message/11183
> Mute This Topic: https://lists.fd.io/mt/28046882/675193
> Group Owner: [email protected]
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [[email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11185): https://lists.fd.io/g/vpp-dev/message/11185
Mute This Topic: https://lists.fd.io/mt/28046882/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to