[ovs-discuss] openvswitch-2.5.0, mcast-snooping patch isn't validating IP checksum

[my_ovs_discuss at yahoo.com]

Thanks Thadeu. 

If we have to fix it, where should we add the code to validate the IP header checksum?
-Thanks
  

      From: Thadeu Lima de Souza Cascardo <cascardo at redhat.com>
 To: my_ovs_discuss at yahoo.com 
Cc: Discuss <discuss at openvswitch.org>
 Sent: Thursday, October 27, 2016 4:53 PM
 Subject: Re: [ovs-discuss] openvswitch-2.5.0, mcast-snooping patch isn't validating IP checksum
   
On Thu, Oct 27, 2016 at 10:10:19PM +0000, my_ovs_discuss at yahoo.com wrote:
> Using openvswitch-2.5.0, user-space mode with Linux 2.6 based kernels.IGMP packets from NIC driver are handed over to Linux stack using netif_rx(). 
> openvswitch is picking packets from net_device using netlink.
> As this path bypasses Linux kernel's IP stack, Linux kernel isn't validating IP checksum.
> Looks like, when packet enters vswitchd, it doesn't seem to validate IP header checksum for the IGMP packets and 
> is directly delivering them to mcast-snoop module.
> Is this a deliberate one to skip validating IP header checksum for IGMP packets in this scenario or I am missing something here.
> -Thanks
>  

That could be considered a bug. Thanks for the report.

Thadeu Cascardo.


   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20161028/e8793bb1/attachment-0002.html>