UNCLEAN & UDP DNS Requests (or are they?)
Fri, 25 Jan 2002 18:21:29 +0100 (CET)
> > SRC=220.127.116.11 DST=18.104.22.168 LEN=80 TOS=0x00 PREC=0x00 TTL=244
> > ID=300 PROTO=UDP SPT=53 DPT=1025 LEN=60
> > SRC=22.214.171.124 DST=126.96.36.199 LEN=80 TOS=0x00 PREC=0x00 TTL=244
> > ID=36384 PROTO=UDP SPT=53 DPT=1025 LEN=60
> If these packets are indeed matched by "unclean", they have been because
> of a bad checksum.
I think i have read somewhere that bad cheksum packets ought to be dropped
by the kernel silently. Is that right?
Hmm, wouldn't it be nice also if UNCLEAN said something about bad
checksums in the logs?