Frank McCormick wrote this...
[snip]
> Source-routed packets and the Ascend P50
> ----------------------------------------
[snip]
> To be fair, Ascend's design choice -- kill before filtering -- is a
> reasonable one. By definition, Ascend's static filtering rules are
> ill equipped to deal sensibly with variable-length option data.
> Source-routing options can, in practice, show up at differing
> offsets in the packets, whereas an Ascend-style "generic" filter can
> look only at fixed locations.
ahh so then you could turn on something like IP record route and your
filter wouldnt work anymore? (because the offsets are all "wrong")
someone have the tools/time to test this?
Matt
--
Matthew Keenan Network Administrator First Pacific Stockbrokers
Sydney, Australia
References:
-
P50 summary
From: Frank McCormick <gfm @
readybox .
com>
|
|
