Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Sep 2007 01:16:24 +0300
From:      "Abdullah Ibn Hamad Al-Marri" <almarrie@gmail.com>
To:        "Robert Watson" <rwatson@freebsd.org>
Cc:        cvs-src@freebsd.org
Subject:   Re: cvs commit: src/sys/netinet tcp_subr.c tcp_timer.c tcp_timer.h
Message-ID:  <499c70c0709191516y37150a2buec443c59fcf4307b@mail.gmail.com>
In-Reply-To: <20070919230135.X3186@fledge.watson.org>
References:  <499c70c0709191459s6911fcf7h4a5d8ccfac881f48@mail.gmail.com> <20070919230135.X3186@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 9/20/07, Robert Watson <rwatson@freebsd.org> wrote:
> On Thu, 20 Sep 2007, Abdullah Ibn Hamad Al-Marri wrote:
>
> > Hello Robert,
> >
> > I still get these messages.
> >
> > TCP: []:65461 to []:3306 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> > SYNCOOKIE authentication, segment rejected (probably spoofed)
> >
> > This is phpmyadmin connects to remote MySQL Server 5.0
>
> We should disable this TCP logging by default, and turn it on only when
> actually debugging a visible issue, as many of the log messages reflect
> perfectly legitimate (or at least common) network conditions.  You can and
> should ignore them for now.  We should ask people to disable this debugging
> only when they have symptoms of specific problems, because the rest of the
> time they cause bug reports for things that aren't bugs :-).  I find the
> following quite useful in sysctl.conf on all my world-facing 7.x servers
> because it gets rid of the noise:
>
>    net.inet.tcp.log_debug=0
>
> Otherwise I get a near-continuous stream of garbage in syslog or the console.
>
> Robert N M Watson
> Computer Laboratory
> University of Cambridge

Robert,

Thank you I disabled it in my 2 servers now ;)


-- 
Regards,

-Abdullah Ibn Hamad Al-Marri
Arab Portal
http://www.WeArab.Net/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?499c70c0709191516y37150a2buec443c59fcf4307b>