From owner-cvs-src@FreeBSD.ORG Wed Sep 19 22:04:00 2007 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9FC4E16A419 for ; Wed, 19 Sep 2007 22:04:00 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42]) by mx1.freebsd.org (Postfix) with ESMTP id 6AB1213C47E for ; Wed, 19 Sep 2007 22:04:00 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by cyrus.watson.org (Postfix) with ESMTP id D162246B04; Wed, 19 Sep 2007 18:03:59 -0400 (EDT) Date: Wed, 19 Sep 2007 23:03:59 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Abdullah Ibn Hamad Al-Marri In-Reply-To: <499c70c0709191459s6911fcf7h4a5d8ccfac881f48@mail.gmail.com> Message-ID: <20070919230135.X3186@fledge.watson.org> References: <499c70c0709191459s6911fcf7h4a5d8ccfac881f48@mail.gmail.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: cvs-src@freebsd.org Subject: Re: cvs commit: src/sys/netinet tcp_subr.c tcp_timer.c tcp_timer.h X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Sep 2007 22:04:00 -0000 On Thu, 20 Sep 2007, Abdullah Ibn Hamad Al-Marri wrote: > Hello Robert, > > I still get these messages. > > TCP: []:65461 to []:3306 tcpflags 0x10; syncache_expand: Segment failed > SYNCOOKIE authentication, segment rejected (probably spoofed) > > This is phpmyadmin connects to remote MySQL Server 5.0 We should disable this TCP logging by default, and turn it on only when actually debugging a visible issue, as many of the log messages reflect perfectly legitimate (or at least common) network conditions. You can and should ignore them for now. We should ask people to disable this debugging only when they have symptoms of specific problems, because the rest of the time they cause bug reports for things that aren't bugs :-). I find the following quite useful in sysctl.conf on all my world-facing 7.x servers because it gets rid of the noise: net.inet.tcp.log_debug=0 Otherwise I get a near-continuous stream of garbage in syslog or the console. Robert N M Watson Computer Laboratory University of Cambridge