6-current 'corrupted mac on input' on cvs co

[Andre Guibert de Bruet]

On Mon, 1 Nov 2004, Charles Swiger wrote:

> On Nov 1, 2004, at 2:29 PM, Josef El-Rayes wrote:
>> Received disconnect from 192.168.0.5: 2: Corrupted MAC on input.
>> cvs[checkout aborted]: received broken pipe signal
>> 
>> any ideas? do you need more input?
>
> The error message comes from /usr/src/crypto/openssh/packet.c, line 973.
>
> I haven't seen it happen often, but there seems to be some correlation 
> between using NAT or having packets get fragmented due to path MTU issues. 
> Any data corruption in the packets going by ought to be detected and fixed at 
> the TCP level, but if it doesn't, SSH will notice and drop the connection.

As Josef pointed out in his other post to this thread, it is due to a 
corruption bug in if_sk. I saw this type of thing with if_nge w/mpsafenet 
set to 1 back in september (Check the archives for the reference), shortly 
after mpsafenet was made standard.

Regards,

| Andre Guibert de Bruet | Enterprise Software Consultant >
| Silicon Landmark, LLC. | http://siliconlandmark.com/    >