Date: Wed, 19 Sep 2007 23:03:59 +0100 (BST) From: Robert Watson <rwatson@FreeBSD.org> To: Abdullah Ibn Hamad Al-Marri <almarrie@gmail.com> Cc: cvs-src@freebsd.org Subject: Re: cvs commit: src/sys/netinet tcp_subr.c tcp_timer.c tcp_timer.h Message-ID: <20070919230135.X3186@fledge.watson.org> In-Reply-To: <499c70c0709191459s6911fcf7h4a5d8ccfac881f48@mail.gmail.com> References: <499c70c0709191459s6911fcf7h4a5d8ccfac881f48@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 20 Sep 2007, Abdullah Ibn Hamad Al-Marri wrote: > Hello Robert, > > I still get these messages. > > TCP: []:65461 to []:3306 tcpflags 0x10<ACK>; syncache_expand: Segment failed > SYNCOOKIE authentication, segment rejected (probably spoofed) > > This is phpmyadmin connects to remote MySQL Server 5.0 We should disable this TCP logging by default, and turn it on only when actually debugging a visible issue, as many of the log messages reflect perfectly legitimate (or at least common) network conditions. You can and should ignore them for now. We should ask people to disable this debugging only when they have symptoms of specific problems, because the rest of the time they cause bug reports for things that aren't bugs :-). I find the following quite useful in sysctl.conf on all my world-facing 7.x servers because it gets rid of the noise: net.inet.tcp.log_debug=0 Otherwise I get a near-continuous stream of garbage in syslog or the console. Robert N M Watson Computer Laboratory University of Cambridge
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070919230135.X3186>