Subject: Re: patch for pre/post-IPSEC traffic with IPv4
To: None <itojun@iijlab.net>
From: Darren Reed <avalon@caligula.anu.edu.au>
List: tech-net
Date: 05/02/2003 01:31:08
In some mail from itojun@iijlab.net, sie said:
> 
> >In some mail from itojun@iijlab.net, sie said:
> >> 
> >> >One thing I did notice was the packets did not seem to have correct
> >> >checksums.  Have I picked the wrong place for intercepting IPv4 packets ?
> >> 
> >> 	to me bpf_mtap() in the middle of ip_input() seems to be the cause.
> >> 
> >> >Also, where on earth is the correct place in the KAME IPv6 code to add
> >> >similar hooks ?  I had a look but it was not clear where to go..
> >> 
> >> 	i don't think we should put any bpf_mtap() into ip*_input().  it
> >> 	belongs to layer 2, not layer 3.
> >
> >Do you have a better solution ?
> 
> 	the best to perform bpf_mtap() is right before IF_ENQUEUE() in
> 	esp[46]_input().

Is m_pkthdr.rcvif going to point to the correct interface at this point ?

Darren