UNCLEAN & UDP DNS Requests (or are they?)

[Maciej Soltysiak]

> > SRC=194.149.228.5 DST=150.254.37.24 LEN=80 TOS=0x00 PREC=0x00 TTL=244
> >                 ID=300 PROTO=UDP SPT=53 DPT=1025 LEN=60
> > SRC=193.42.228.5 DST=150.254.37.24 LEN=80 TOS=0x00 PREC=0x00 TTL=244
> >                 ID=36384 PROTO=UDP SPT=53 DPT=1025 LEN=60
>
> If these packets are indeed matched by "unclean", they have been because
> of a bad checksum.

Thanks Guillaume,

I think i have read somewhere that bad cheksum packets ought to be dropped
by the kernel silently. Is that right?

Hmm, wouldn't it be nice also if UNCLEAN said something about bad
checksums in the logs?


Best Regards,
Maciej Soltysiak