- 论坛徽章:
- 0
|
- /* ip_conntrack_proto_tcp.c */
- static void tcp_options(const struct sk_buff *skb,
- struct iphdr *iph,
- struct tcphdr *tcph,
- struct ip_ct_tcp_state *state)
- {
- ......
- default:
- opsize = *ptr++;
- if (opsize < 2) /* "silly options" */
- return;
- // 1, thses 2 if not warrant the integrity
- // of state in case of nicely constructed syn,
- // though only sack and winscale concerned here.
- // #####
- // 2, possible for linux to do syn proxy as BSD,
- // though timestamp also not concerned????
- // 3, if tcp options not concerned, how to
- // warrant tcp quality??
- if (opsize > length)
- break; /* don't parse partial options */
- ......
- }
复制代码 |
|