> On 9 Nov 2018, at 15:42, blankspot <blanks...@163.com> wrote:
> 
> hi, vpp dev
> 
> I am doing some fragment test using vpp 18.07.  IP4 Packet with offset 8 is 
> dropped with trace error: 
> 
> 00:20:04:661292: error-drop
>   ip4-input: ip4 fragment offset == 1
> 
> I find the comment in ip4_input.h: /* Drop fragmentation offset 1 packets. */
> 
> Does someone know why? 

Because it’s a tiny fragment attack?

Cheers 
Ole

> 
> Best regards,
> 
> yonggong
> 
> blanks...@163.com
>      
> 签名由 网易邮箱大师 定制
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> 
> View/Reply Online (#11183): https://lists.fd.io/g/vpp-dev/message/11183
> Mute This Topic: https://lists.fd.io/mt/28046882/675193
> Group Owner: vpp-dev+ow...@lists.fd.io
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [otr...@employees.org]
> -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11185): https://lists.fd.io/g/vpp-dev/message/11185
Mute This Topic: https://lists.fd.io/mt/28046882/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to