Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 03:56:19 -0000
From:      "Florian C. Smeets" <flo@kasimir.com>
To:        pf4freebsd@freelists.org
Subject:   [pf4freebsd] Re: nfsd send error 1 probably caused by pf ?
Message-ID:  <3FB3EBBA.5070405@kasimir.com>
In-Reply-To: <20031113163911.GR17343@insomnia.benzedrine.cx>
References:  <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com> <3FB2B5AB.50601@kasimir.com> <20031113163911.GR17343@insomnia.benzedrine.cx>

next in thread | previous in thread | raw e-mail | index | archive | help

Daniel Hartmeier wrote:
> On Wed, Nov 12, 2003 at 11:35:23PM +0100, Florian C. Smeets wrote:
> 
> 
>>I get a lot of these BAD state messages with debug leve misc:
>>
>>Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 
>>172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465 
>>win=16588 modulator=0] [lo=1139973024 high=1139974122 win=17200 
>>modulator=0] 4:4 A
>>  seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406886:392362 
>>dir=in,rev
> 
> 
> To prove this theory, you'd need a tcpdump -nvvvS of the entire
> connection (or at least a couple of packets before the first BAD state
> message). The connection doesn't use window scaling, so either the peer
> is at fault or pf saw a packet reducing your window size which got lost
> before the peer saw it. How regularly does this occur?
> 

I'm going to test this in the weekend. I don't have much time at the moment.

If i get the time i'm going to try to reproduce this at work tomorrow.

Thanks alot for your help,
flo





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FB3EBBA.5070405>