From owner-freebsd-net@FreeBSD.ORG Thu Feb 10 21:28:54 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1656016A4CE for ; Thu, 10 Feb 2005 21:28:54 +0000 (GMT) Received: from obsecurity.dyndns.org (CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.199.47.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id D014643D1F for ; Thu, 10 Feb 2005 21:28:53 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 0CF125136F; Thu, 10 Feb 2005 13:28:53 -0800 (PST) Date: Thu, 10 Feb 2005 13:28:52 -0800 From: Kris Kennaway To: Sam Jansen Message-ID: <20050210212852.GA10195@xor.obsecurity.org> References: <420BCEF7.1080603@meta.net.nz> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="UlVJffcvxoiEqYs2" Content-Disposition: inline In-Reply-To: <420BCEF7.1080603@meta.net.nz> User-Agent: Mutt/1.4.2.1i cc: freebsd-net@freebsd.org Subject: Re: SACK problems X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Feb 2005 21:28:54 -0000 --UlVJffcvxoiEqYs2 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Feb 11, 2005 at 10:15:35AM +1300, Sam Jansen wrote: > During some testing on an isolated network we have, I found some=20 > interesting behaviour from a FreeBSD 5.3 host using TCP SACK. >=20 > I've detailed this problem fully at: >=20 > http://www.wand.net.nz/~stj2/nsc/emu_freebsd.html >=20 > PCAP traces and some screenshots from tcptrace graphs can be found at=20 > the above link to show what is happening. It looks to me like SACK=20 > blocks are being incorrectly generated in this example. I can't think of= =20 > any valid reason why a SACK block would SACK from below the current ACK= =20 > value to above it (which is the problem here). >=20 > Thoughts, anyone? Am I just wrong here and this is valid, expected=20 > behaviour? A fix to the SACK code was committed yesterday, which may or may not be relevant. Kris --UlVJffcvxoiEqYs2 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFCC9IUWry0BWjoQKURAnpyAJ9Z8R6ydGjhdKCqpt+zPuCC/0K9qACePnEX D/fZFvFAiL1m8Af2l+pMJjg= =kW8D -----END PGP SIGNATURE----- --UlVJffcvxoiEqYs2--