IP bad-len 0

[David Malone]

On Wed, Feb 06, 2008 at 04:32:07AM +0200, Nikolay Pavlov wrote:
> On Tuesday 05 February 2008 11:34:29 Krassimir Slavchev wrote:
> > Hi,
> > Can you try:
> > net.inet.tcp.rfc1323=0
> 
> Not working for me. Any other thoughts?

rfc1323 is unlikely to produce zero length IP packets.

I'd suggest running tcpdump with the "-X" and "-e" flags - that way
you will be able to see the MAC address of the machine sending these
packets. You'll also be able to see a hex dump of them, which may
help figuring out what is going on.

	David.