1

currently I am having a Computer Networking cours and I am reading "Computer Networking a Top-Down Approach"

At this point I am reading the Transport Layer part. And I have read about the checksum method which UDP provides for error detection. I understand the algorithm but I dont understand how this helps me if my application data which I have send did not get bigger or smaller and changes the length part(number)?

For example, someone is trying to manipulate my UDP Datagram and he does not change the length or some other header information he only swap the characters in the data part. Other examples are for example, by noise in the links or while stored in a router

So we have no changes in the header information and I would again the right checksume and together 1111111111111111 16-bit long number.

Maybe I miss something?

1

Unless you have implemented transport layer encryption or application level encryption or data signing, there is no way to tell if anyone has manipulated your UDP datagram - whether in content or in size. Manipulation has to include recalculating the checksum, of course.

The checksum's only purpose is to provide transport integrity against accidental changes, i.e. the receiving IP stack can see whether the datagram has been damaged in transport and will then discard it - silently, as it's UDP.

If a deeper layer is using a checksum - as in Ethernet's link layer - the damaged packet/frame has already been discarded on the way, long before reaching the destination.

  • Thank You! So thats why its more important nowadays to use for example http secure? – Nado Dec 12 '17 at 16:47
  • HTTPS uses TLS transport layer encryption and unless an attacker is able to break the encryption, it guarantees privacy and integrity of the transmission. The encryption can only be broken for weak ciphers or when there's a problem with the key exchange. You can also use TLS with UDP but it's pretty uncommon. – Zac67 Dec 12 '17 at 18:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.