Re: SACK (and PF) wierdness

From: Daniel Hartmeier (daniel_at_benzedrine.cx)
Date: 11/22/04

  • Next message: Eric Masson: "gif4) & AltQ"
    Date: Mon, 22 Nov 2004 14:18:52 +0100
    To: Pawel Worach <pawel.worach@telia.com>
    
    

    Pawel, could you provide a tcpdump -nvvvSXpi <if> for an entire
    connection, from handshake to the point where it stalls? Please include
    the corresponding 'BAD state'/'State failure' messages and output of
    pfctl -vvss related to the connection (ideally all for the same
    connection, so timestamps are comparable).

    If the output is too long to post here, put it on a web server and post
    the URL, or mail the dump to Max and me privately.

    It does look like one peer is violating the other's window by sending
    too much data before acknowledgement. The state has picked up on the
    window scaling, so we need to see the entire TCP connection to determine
    whether the packet is dropped correctly or not.

    Daniel
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"


  • Next message: Eric Masson: "gif4) & AltQ"

    Relevant Pages

    • Re: 2.6.17: networking bug??
      ... boxes you can't just "turn off window scaling" after it's been ... It's immutably active for the entire connection once ... you connect to that host. ...
      (Linux-Kernel)
    • As predominantly as Darcy drowns, you can carve the reign much more correctly.
      ... Allahdad honours the yarn in relation to hers and honestly negotiates. ... express stalls now or Carol will smartly load them in back of you. ... Others afterwards inspire. ... into the bored route were sacking in connection with the numerous ...
      (sci.crypt)
    • Re: Problem with ISA 2004 SP2 and Dlink HI-804HV in Site to Site V
      ... No it actually made it worse to where no connection could be obtained. ... "Johan Engdahl" wrote: ... 12:04:23 547 Failure Quick Mode ... IKE security association negotiation failed. ...
      (microsoft.public.isa.vpn)
    • [PATCH 4/6] iSER RDMA CM (CMA) and IB verbs interaction
      ... * licenses. ... * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE ... * -1 on failure ... * Frees all conn objects and deallocs conn descriptor ...
      (Linux-Kernel)
    • Windows 2003 SP1 - Many problems on ISA 2000 server
      ... On one server, Microsoft Firewall failed to start with Event 11011: ... Network Address Translation because the system call PNATInit failed. ... Use the source location 308.1151.3.0.1200.365 to report the failure. ... This failure may be due to the Internet Connection Firewall ...
      (microsoft.public.isa.configuration)