Re: Kernel Sends 7E ?
-------------------------------
This has been a Communiqué from
his Imperial Majesty Admiral Thrawn.
-------------------------------
>Are you using TCP, UDP, or some completely different protocol
>enirely? Also, can you get a network trace of the packet in
>question?
TCP\IP ( TCP Port 227 )
On and ethernet network
BNC / Cat5
This is a POS system for Carmike Cinamas
( The Serve Daemon is ours. We know that the 7E's are not comming from our
program
we logged all the output to a file and checked. )
>More details about the packet in question could at the very least
>narrow this down to which part of the kernel is responsible.
1/10/01 5:01:03 PM
0000: 00 90 27 D6 CF A5 08 00 17 08 A0 49 08 00 45 00 .?'ÖÏ¥.... I..E.
0010: 00 2A 00 81 00 00 58 06 D6 8A C0 A8 05 71 C0 A8 .*.?..X.ÖSÀ¨.qÀ¨
0020: 05 01 03 75 00 E3 9C D9 00 A9 EB 3F 86 01 50 10 ...u.ãoÙ.©ë??.P.
0030: 08 00 FE F3 00 00 0A 00 00 00 00 00 ..þó........
1/10/01 5:01:04 PM
0000: 08 00 17 08 A0 49 00 90 27 D6 CF A5 08 00 45 00 .... I.?'ÖÏ¥..E.
0010: 00 28 08 32 40 00 40 06 A6 DB C0 A8 05 01 C0 A8 .(.2@.@.¦ÛÀ¨..À¨
0020: 05 71 00 E3 03 75 EB 3F 86 01 9C D9 00 AB 50 10 .q.ã.uë??.oÙ.«P.
0030: 7F E0 91 13 00 00 7E 7E 7E 7E 7E 7E à'...~~~~~~
1/10/01 5:01:04 PM
0000: 00 90 27 D6 CF A5 08 00 17 08 A0 49 08 00 45 00 .?'ÖÏ¥.... I..E.
0010: 00 28 00 82 00 00 58 06 D6 8B C0 A8 05 71 C0 A8 .(.,..X.Ö<À¨.qÀ¨
0020: 05 01 03 75 00 E3 9C D9 00 AB EB 3F 86 01 50 10 ...u.ãoÙ.«ë??.P.
0030: 08 00 08 F4 00 00 00 00 00 00 00 00 ...ô........
1/10/01 5:01:08 PM
0000: 08 00 17 08 A0 49 00 90 27 D6 CF A5 08 00 45 00 .... I.?'ÖÏ¥..E.
0010: 00 2E 08 33 40 00 40 06 A6 D4 C0 A8 05 01 C0 A8 ...3@.@.¦ÔÀ¨..À¨
0020: 05 71 00 E3 03 75 EB 3F 86 01 9C D9 00 AB 50 18 .q.ã.uë??.oÙ.«P.
0030: 7F E0 7F 04 00 00 FF 00 00 00 13 00 à...ÿ.....
1/10/01 5:01:08 PM
0000: 00 90 27 D6 CF A5 08 00 17 08 A0 49 08 00 45 00 .?'ÖÏ¥.... I..E.
0010: 00 28 00 83 00 00 58 06 D6 8A C0 A8 05 71 C0 A8 .(.f..X.ÖSÀ¨.qÀ¨
0020: 05 01 03 75 00 E3 9C D9 00 AB EB 3F 86 07 50 10 ...u.ãoÙ.«ë??.P.
0030: 08 00 08 EE 00 00 00 00 00 00 00 00 ...î........
The second packet contains the 7E's the forth Packet Contains the answer
that the client is expecting. ( FF ) We could just have the client to ignore
the 7E's but we don't wan't to limit our selves for expansion.
This is not a PPP connect as some have sugessted.
A thought that had crossed my mind was that these 7E's are Null's put in by
the kernel after clearing the buffer. we checked the deamon code for that
possability but did find anything interesting.
We are not using Debian. But I'm a big Debian Fan and have gon out on my own
to ask the profesional Debian Comunity for assistance ( Redhat isn't helping
much... not surprissed.)
We ARE useing Redhat 5.0.
I don't make those decesions so I can't change that. how ever I am working
on testing the deamon on the debian system. maybe I can force a change in
company OS <GRIN>
Reply to: