RE: [NAT] TCP checksum adjustment in NAT

"Kjeld Borch Egevang" <kjeld@egevang.dk> Sat, 01 September 2001 20:59 UTC

Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA17793; Sat, 1 Sep 2001 16:59:30 -0400 (EDT)
Received: from optimus.ietf.org (localhost [127.0.0.1]) by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id QAA00719; Sat, 1 Sep 2001 16:56:22 -0400 (EDT)
Received: from ietf.org (odin [132.151.1.176]) by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id QAA00694 for <nat@ns.ietf.org>; Sat, 1 Sep 2001 16:56:20 -0400 (EDT)
Received: from mx.mips.com (mx.mips.com [206.31.31.226]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA17761 for <nat@ietf.org>; Sat, 1 Sep 2001 16:53:52 -0400 (EDT)
Received: from newman.mips.com (ns-dmz [206.31.31.225]) by mx.mips.com (8.9.3/8.9.0) with ESMTP id NAA07735 for <nat@ietf.org>; Sat, 1 Sep 2001 13:52:23 -0700 (PDT)
Received: from copfs01.mips.com (copfs01 [192.168.205.101]) by newman.mips.com (8.9.3/8.9.0) with ESMTP id NAA02458 for <nat@ietf.org>; Sat, 1 Sep 2001 13:52:24 -0700 (PDT)
Received: from kjelde (coppckbe [172.17.85.2]) by copfs01.mips.com (8.11.4/8.9.0) with SMTP id f81KoIa28235; Sat, 1 Sep 2001 22:50:59 +0200 (MEST)
From: Kjeld Borch Egevang <kjeld@egevang.dk>
To: Kavleen Bhatia <kavleenk@delhi.tcs.co.in>, nat@ietf.org
Subject: RE: [NAT] TCP checksum adjustment in NAT
Date: Sat, 01 Sep 2001 22:51:19 +0200
Message-ID: <NFBBKGGKGLLGNBGCEPKICEGFCAAA.kjeld@egevang.dk>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0004_01C13338.9DA66F00"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
In-Reply-To: <009c01c13081$8bc87850$1902e39d@nokian25>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: nat-admin@ietf.org
Errors-To: nat-admin@ietf.org
X-Mailman-Version: 1.0
Precedence: bulk
List-Id: Network Address Translation <nat.ietf.org>
X-BeenThere: nat@ietf.org

Hi Kavleen.

If your TCP checksum is bad, it might be because you forgot to include the
pseudo header in the checksum calcalution.

I can recommend, that you adjust the TCP checksum incrementelly (based on
old address/port and new address/port). This will ensure that if the
checksum was bad due to a transmission error in the path it will still be
bad.

Try to dump that packet, and calculate the TCP checksum by hand before and
after NAT.


/Kjeld

-----Original Message-----
From: nat-admin@ietf.org [mailto:nat-admin@ietf.org]On Behalf Of Kavleen
Bhatia
Sent: 29. august 2001 13:56
To: nat@ietf.org
Subject: [NAT] TCP checksum adjustment in NAT


Hi,

I am currently implementing NAT on VxWorks. I am not able to calculate the
adjustment to the TCP Checksum. The packet is not received at the
destination due to bad checksum.

could anybody provide any pointers to the same.

Kavleen