From owner-freebsd-pf@FreeBSD.ORG Sun Mar 6 06:08:32 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 196CF16A4CE for ; Sun, 6 Mar 2005 06:08:32 +0000 (GMT) Received: from hotmail.com (bay24-f18.bay24.hotmail.com [64.4.18.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8BEAF43D39 for ; Sun, 6 Mar 2005 06:08:31 +0000 (GMT) (envelope-from segr@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sat, 5 Mar 2005 22:08:31 -0800 Message-ID: Received: from 204.9.110.182 by by24fd.bay24.hotmail.msn.com with HTTP; Sun, 06 Mar 2005 06:08:31 GMT X-Originating-IP: [204.9.110.182] X-Originating-Email: [segr@hotmail.com] X-Sender: segr@hotmail.com In-Reply-To: <20050305222000.GC26999@insomnia.benzedrine.cx> From: "Stephane Raimbault" To: daniel@benzedrine.cx Date: Sat, 05 Mar 2005 23:08:31 -0700 Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 06 Mar 2005 06:08:31.0451 (UTC) FILETIME=[EC062AB0:01C52212] cc: freebsd-pf@freebsd.org Subject: Re: nat / rdr timeouts? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Mar 2005 06:08:32 -0000 Thanks for the response... my debug output is below. >From: Daniel Hartmeier >To: Stephane Raimbault >CC: freebsd-pf@freebsd.org >Subject: Re: nat / rdr timeouts? >Date: Sat, 5 Mar 2005 23:20:00 +0100 > >On Sat, Mar 05, 2005 at 02:57:56PM -0700, Stephane Raimbault wrote: > > > I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same > > results. Do I need to recompile any other parts of the system? > >No, that's it. > > > Do we believe I've stumbled onto a bug of pf... or is this some sort of > > anti-DoS feature? > >The default limit on number of states is 10,000. If further packets try >to create state, they are dropped. But it doesn't look like you're >hitting that. > >Enable debug loggin (pfctl -xm), reproduce the problem, then check >/var/log/messages for anything from pf. > Mar 5 23:17:56 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:17:56 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:17:59 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:17:59 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:18:02 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:18:02 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:18:05 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:18:05 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:18:09 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:18:09 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:18:12 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:18:12 lb1-dev kernel: pf: State failure on: 1 | 5 Mar 5 23:18:18 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 dir=in,fwd Mar 5 23:18:18 lb1-dev kernel: pf: State failure on: 1 | 5 >Also quote pfctl -vvss output after the problem, as well as pfctl -si, >please. > # pfctl -vvss No ALTQ support in kernel ALTQ related functions disabled self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2561 FIN_WAIT_2:FIN_WAIT_2 [32585757 + 57920] wscale 0 [4030666851 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a29420000033f creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3073 FIN_WAIT_2:FIN_WAIT_2 [280614368 + 57920] wscale 0 [871170019 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000368 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1546 FIN_WAIT_2:FIN_WAIT_2 [318290820 + 57920] wscale 0 [3755105029 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000349 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3347 FIN_WAIT_2:FIN_WAIT_2 [1140076597 + 57920] wscale 0 [4121153694 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031b creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2836 FIN_WAIT_2:FIN_WAIT_2 [2909277378 + 57920] wscale 0 [448910790 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000370 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2327 FIN_WAIT_2:FIN_WAIT_2 [2987561263 + 57920] wscale 0 [4146806117 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000318 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2329 FIN_WAIT_2:FIN_WAIT_2 [1833281301 + 57920] wscale 0 [1053857949 + 57920] wscale 0 age 00:00:59, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000327 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1818 FIN_WAIT_2:FIN_WAIT_2 [2636697734 + 57920] wscale 0 [2763808572 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000353 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4380 FIN_WAIT_2:FIN_WAIT_2 [1563439928 + 57920] wscale 0 [2156220237 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000375 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3613 FIN_WAIT_2:FIN_WAIT_2 [4269333757 + 57920] wscale 0 [28302277 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000325 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2334 FIN_WAIT_2:FIN_WAIT_2 [4236319117 + 57920] wscale 0 [756984446 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000376 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1570 FIN_WAIT_2:FIN_WAIT_2 [1467784327 + 57920] wscale 0 [1805572515 + 57920] wscale 0 age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000389 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2854 FIN_WAIT_2:FIN_WAIT_2 [1264223110 + 57920] wscale 0 [3114805151 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000380 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2599 FIN_WAIT_2:FIN_WAIT_2 [2493007175 + 57920] wscale 0 [4071674965 + 57920] wscale 0 age 00:00:58, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a29420000033b creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4647 FIN_WAIT_2:FIN_WAIT_2 [1519840616 + 57920] wscale 0 [1155588281 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000351 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2600 FIN_WAIT_2:FIN_WAIT_2 [3829938788 + 57920] wscale 0 [2288730060 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000346 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1323 FIN_WAIT_2:FIN_WAIT_2 [3299837026 + 57920] wscale 0 [571661919 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037f creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4139 FIN_WAIT_2:FIN_WAIT_2 [2936258233 + 57920] wscale 0 [3552485098 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1069 FIN_WAIT_2:FIN_WAIT_2 [3429734760 + 57920] wscale 0 [1047686037 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000350 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1582 FIN_WAIT_2:FIN_WAIT_2 [2239408408 + 57920] wscale 0 [792523365 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000356 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1839 FIN_WAIT_2:FIN_WAIT_2 [1084975327 + 57920] wscale 0 [3468075791 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035c creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4402 FIN_WAIT_2:FIN_WAIT_2 [1734033910 + 57920] wscale 0 [4212345601 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a29420000033c creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3636 FIN_WAIT_2:FIN_WAIT_2 [1247559674 + 57920] wscale 0 [3855641134 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036c creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4917 FIN_WAIT_2:FIN_WAIT_2 [2579269706 + 57920] wscale 0 [2765039414 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a294200000340 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1334 FIN_WAIT_2:FIN_WAIT_2 [1322299975 + 57920] wscale 0 [4143165048 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000352 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1593 FIN_WAIT_2:FIN_WAIT_2 [3145580381 + 57920] wscale 0 [1476283631 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000345 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2361 TIME_WAIT:TIME_WAIT [1651992099 + 57344] wscale 0 [1675199900 + 57345] wscale 0 age 00:00:53, expires in 00:00:37, 2:1 pkts, 100:60 bytes id: 422a294200000377 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3132 FIN_WAIT_2:FIN_WAIT_2 [54760795 + 57920] wscale 0 [685586651 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3388 FIN_WAIT_2:FIN_WAIT_2 [1740195130 + 57920] wscale 0 [2837513788 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000330 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4668 FIN_WAIT_2:FIN_WAIT_2 [4153305444 + 57920] wscale 0 [3657625607 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000362 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2110 FIN_WAIT_2:FIN_WAIT_2 [1680438376 + 57920] wscale 0 [4124389714 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032b creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4927 FIN_WAIT_2:FIN_WAIT_2 [3926918789 + 57920] wscale 0 [1578868844 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032f creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2369 FIN_WAIT_2:FIN_WAIT_2 [3264887916 + 57920] wscale 0 [1040383065 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000373 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3138 FIN_WAIT_2:FIN_WAIT_2 [3668537022 + 57920] wscale 0 [4070704551 + 57920] wscale 0 age 00:00:51, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000384 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4677 FIN_WAIT_2:FIN_WAIT_2 [4255514426 + 57920] wscale 0 [2108554394 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031e creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1351 FIN_WAIT_2:FIN_WAIT_2 [650459315 + 57920] wscale 0 [3007417138 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035d creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4935 FIN_WAIT_2:FIN_WAIT_2 [2640203207 + 57920] wscale 0 [1946606900 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1864 FIN_WAIT_2:FIN_WAIT_2 [302555830 + 57920] wscale 0 [4259092904 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4936 FIN_WAIT_2:FIN_WAIT_2 [3747285884 + 57920] wscale 0 [1707501039 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000364 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4426 FIN_WAIT_2:FIN_WAIT_2 [4052825702 + 57920] wscale 0 [1998932217 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4429 FIN_WAIT_2:FIN_WAIT_2 [2963041429 + 57920] wscale 0 [2854499682 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000328 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4941 FIN_WAIT_2:FIN_WAIT_2 [363310172 + 57920] wscale 0 [1840047747 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000331 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1871 FIN_WAIT_2:FIN_WAIT_2 [1551203117 + 57920] wscale 0 [1422169461 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000329 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3152 FIN_WAIT_2:FIN_WAIT_2 [1387806479 + 57920] wscale 0 [1346138440 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000320 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4944 FIN_WAIT_2:FIN_WAIT_2 [2112290315 + 57920] wscale 0 [3096897628 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037e creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3921 FIN_WAIT_2:FIN_WAIT_2 [2276016873 + 57920] wscale 0 [2659410744 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000333 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4692 FIN_WAIT_2:FIN_WAIT_2 [4210818300 + 57920] wscale 0 [3178408136 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000319 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4696 FIN_WAIT_2:FIN_WAIT_2 [3697003529 + 57920] wscale 0 [1024494100 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000336 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1116 FIN_WAIT_2:FIN_WAIT_2 [2568047902 + 57920] wscale 0 [2313094524 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000383 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1372 FIN_WAIT_2:FIN_WAIT_2 [2263179419 + 57920] wscale 0 [665532303 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035b creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1119 FIN_WAIT_2:FIN_WAIT_2 [3415385225 + 57920] wscale 0 [1370230622 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000382 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3938 FIN_WAIT_2:FIN_WAIT_2 [3603803766 + 57920] wscale 0 [276202704 + 57920] wscale 0 age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000386 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4456 FIN_WAIT_2:FIN_WAIT_2 [48494854 + 57920] wscale 0 [1301768752 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032e creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2153 FIN_WAIT_2:FIN_WAIT_2 [2753680443 + 57920] wscale 0 [557071720 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031f creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4714 FIN_WAIT_2:FIN_WAIT_2 [1504808638 + 57920] wscale 0 [2927860233 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000033a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3693 FIN_WAIT_2:FIN_WAIT_2 [416273073 + 57920] wscale 0 [4216442984 + 57920] wscale 0 age 00:01:00, expires in 00:00:30, 5:4 pkts, 363:508 bytes id: 422a294200000312 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2159 FIN_WAIT_2:FIN_WAIT_2 [617626453 + 57920] wscale 0 [3344368062 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000321 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3951 FIN_WAIT_2:FIN_WAIT_2 [2792267335 + 57920] wscale 0 [997036292 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000379 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2673 FIN_WAIT_2:FIN_WAIT_2 [4169187362 + 57920] wscale 0 [2600215828 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000332 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3698 FIN_WAIT_2:FIN_WAIT_2 [4173377263 + 57920] wscale 0 [113027635 + 57920] wscale 0 age 00:00:55, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000355 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2169 FIN_WAIT_2:FIN_WAIT_2 [3490211889 + 57920] wscale 0 [2950876502 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037c creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2937 FIN_WAIT_2:FIN_WAIT_2 [978963795 + 57920] wscale 0 [1899890588 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000354 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4473 FIN_WAIT_2:FIN_WAIT_2 [20706720 + 57920] wscale 0 [308909836 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000315 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3706 FIN_WAIT_2:FIN_WAIT_2 [1571667015 + 57920] wscale 0 [3670251619 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000381 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4732 FIN_WAIT_2:FIN_WAIT_2 [558353217 + 57920] wscale 0 [1843229679 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000339 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1150 FIN_WAIT_2:FIN_WAIT_2 [69371452 + 57920] wscale 0 [2527043649 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034e creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4738 FIN_WAIT_2:FIN_WAIT_2 [3004764914 + 57920] wscale 0 [3140248529 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035f creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1155 FIN_WAIT_2:FIN_WAIT_2 [1742408037 + 57920] wscale 0 [217529573 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000359 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4996 FIN_WAIT_2:FIN_WAIT_2 [3353863411 + 57920] wscale 0 [2037795993 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a29420000033d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2438 FIN_WAIT_2:FIN_WAIT_2 [2363515767 + 57920] wscale 0 [940185069 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2440 FIN_WAIT_2:FIN_WAIT_2 [1512264113 + 57920] wscale 0 [1583872006 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000326 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3977 FIN_WAIT_2:FIN_WAIT_2 [3375214689 + 57920] wscale 0 [3340380428 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000338 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2442 FIN_WAIT_2:FIN_WAIT_2 [366541085 + 57920] wscale 0 [4229618380 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000365 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2955 FIN_WAIT_2:FIN_WAIT_2 [3023032248 + 57920] wscale 0 [2714578033 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037b creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1676 FIN_WAIT_2:FIN_WAIT_2 [2143584703 + 57920] wscale 0 [2632152330 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000334 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2957 FIN_WAIT_2:FIN_WAIT_2 [3376655763 + 57920] wscale 0 [1962882777 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2959 FIN_WAIT_2:FIN_WAIT_2 [2381496694 + 57920] wscale 0 [3907940618 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036e creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2193 FIN_WAIT_2:FIN_WAIT_2 [1147009346 + 57920] wscale 0 [652578834 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031c creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1173 FIN_WAIT_2:FIN_WAIT_2 [3847048096 + 57920] wscale 0 [4202192232 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000367 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2966 FIN_WAIT_2:FIN_WAIT_2 [1704883050 + 57920] wscale 0 [397640671 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034b creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1176 FIN_WAIT_2:FIN_WAIT_2 [2908611795 + 57920] wscale 0 [1143955128 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034f creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3225 TIME_WAIT:TIME_WAIT [4053421973 + 57344] wscale 0 [1116197573 + 57345] wscale 0 age 00:00:57, expires in 00:00:33, 2:1 pkts, 100:60 bytes id: 422a294200000344 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3227 FIN_WAIT_2:FIN_WAIT_2 [3697384915 + 57920] wscale 0 [4194776544 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000323 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4764 FIN_WAIT_2:FIN_WAIT_2 [3426015243 + 57920] wscale 0 [3468954857 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a29420000031a creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2721 FIN_WAIT_2:FIN_WAIT_2 [3210917859 + 57920] wscale 0 [501355691 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a29420000035e creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2214 FIN_WAIT_2:FIN_WAIT_2 [2024368372 + 57920] wscale 0 [1315702046 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2983 FIN_WAIT_2:FIN_WAIT_2 [3207150264 + 57920] wscale 0 [2168442372 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a294200000342 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4263 FIN_WAIT_2:FIN_WAIT_2 [46597085 + 57920] wscale 0 [4061701497 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a29420000032c creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2984 FIN_WAIT_2:FIN_WAIT_2 [785309605 + 57920] wscale 0 [178732332 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000335 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4265 FIN_WAIT_2:FIN_WAIT_2 [1077034523 + 57920] wscale 0 [508685133 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000347 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2474 FIN_WAIT_2:FIN_WAIT_2 [3579823839 + 57920] wscale 0 [3186549033 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000317 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3501 FIN_WAIT_2:FIN_WAIT_2 [830389565 + 57920] wscale 0 [3726843152 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000366 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4785 FIN_WAIT_2:FIN_WAIT_2 [2419913039 + 57920] wscale 0 [2289781021 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a294200000348 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3511 FIN_WAIT_2:FIN_WAIT_2 [2249296099 + 57920] wscale 0 [2932871839 + 57920] wscale 0 age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000385 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4794 FIN_WAIT_2:FIN_WAIT_2 [3411371868 + 57920] wscale 0 [2783458838 + 57920] wscale 0 age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000387 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4539 FIN_WAIT_2:FIN_WAIT_2 [1104604839 + 57920] wscale 0 [2842567409 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a29420000033e creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3519 FIN_WAIT_2:FIN_WAIT_2 [3740703471 + 57920] wscale 0 [87932817 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000374 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3521 FIN_WAIT_2:FIN_WAIT_2 [2968103458 + 57920] wscale 0 [3601469586 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000316 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2249 FIN_WAIT_2:FIN_WAIT_2 [482606504 + 57920] wscale 0 [2208108060 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000372 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1994 FIN_WAIT_2:FIN_WAIT_2 [39371535 + 57920] wscale 0 [3193833702 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000314 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4818 FIN_WAIT_2:FIN_WAIT_2 [1810505629 + 57920] wscale 0 [2489348362 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000371 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1238 FIN_WAIT_2:FIN_WAIT_2 [1759844756 + 57920] wscale 0 [1414167188 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a294200000378 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2262 FIN_WAIT_2:FIN_WAIT_2 [837001507 + 57920] wscale 0 [3660905760 + 57920] wscale 0 age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes id: 422a29420000037d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3030 FIN_WAIT_2:FIN_WAIT_2 [2939379438 + 57920] wscale 0 [2989656088 + 57920] wscale 0 age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes id: 422a294200000388 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4566 FIN_WAIT_2:FIN_WAIT_2 [36874042 + 57920] wscale 0 [1489690186 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036d creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3033 FIN_WAIT_2:FIN_WAIT_2 [894623290 + 57920] wscale 0 [1705678299 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000324 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4058 FIN_WAIT_2:FIN_WAIT_2 [3593573975 + 57920] wscale 0 [4218672704 + 57920] wscale 0 age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000322 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1499 FIN_WAIT_2:FIN_WAIT_2 [3353910087 + 57920] wscale 0 [2313641214 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000361 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1244 FIN_WAIT_2:FIN_WAIT_2 [2144658656 + 57920] wscale 0 [3510611502 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000360 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3551 FIN_WAIT_2:FIN_WAIT_2 [3266650438 + 57920] wscale 0 [1463919518 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036b creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4064 FIN_WAIT_2:FIN_WAIT_2 [480151856 + 57920] wscale 0 [111602781 + 57920] wscale 0 age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes id: 422a29420000034c creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3041 FIN_WAIT_2:FIN_WAIT_2 [3790883218 + 57920] wscale 0 [1635610553 + 57920] wscale 0 age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes id: 422a294200000337 creatorid: 0f363004 self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2786 FIN_WAIT_2:FIN_WAIT_2 [1503037157 + 57920] wscale 0 [2999158633 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000358 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4837 FIN_WAIT_2:FIN_WAIT_2 [3904040791 + 57920] wscale 0 [1708743304 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a294200000343 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3561 FIN_WAIT_2:FIN_WAIT_2 [760186488 + 57920] wscale 0 [3036802596 + 57920] wscale 0 age 00:01:00, expires in 00:00:31, 5:4 pkts, 363:508 bytes id: 422a294200000313 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1258 FIN_WAIT_2:FIN_WAIT_2 [283551952 + 57920] wscale 0 [2454096152 + 57920] wscale 0 age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a29420000036f creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4590 FIN_WAIT_2:FIN_WAIT_2 [1656348739 + 57920] wscale 0 [1476131618 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000363 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1785 FIN_WAIT_2:FIN_WAIT_2 [378495766 + 57920] wscale 0 [449574348 + 57920] wscale 0 age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes id: 422a294200000357 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4601 FIN_WAIT_2:FIN_WAIT_2 [3216638735 + 57920] wscale 0 [2886955349 + 57920] wscale 0 age 00:00:54, expires in 00:00:37, 5:4 pkts, 363:508 bytes id: 422a294200000369 creatorid: 0f363004 self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4093 FIN_WAIT_2:FIN_WAIT_2 [3263818736 + 57920] wscale 0 [2611351584 + 57920] wscale 0 age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes id: 422a294200000341 creatorid: 0f363004 # pfctl -si No ALTQ support in kernel ALTQ related functions disabled Status: Enabled for 0 days 08:31:15 Debug: Misc Hostid: 0x0f363004 State Table Total Rate current entries 0 searches 49637 1.6/s inserts 906 0.0/s removals 906 0.0/s Counters match 42759 1.4/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 0 0.0/s memory 0 0.0/s I might of run the pfctl -si to late after the test... I re-ran the test and when I got the symptoms again I rerans the pfctl -si output: # pfctl -si No ALTQ support in kernel ALTQ related functions disabled Status: Enabled for 0 days 08:33:18 Debug: Misc Hostid: 0x0f363004 State Table Total Rate current entries 53 searches 50837 1.7/s inserts 959 0.0/s removals 906 0.0/s Counters match 43534 1.4/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 0 0.0/s memory 0 0.0/s >Daniel Thank you, Stephane. _________________________________________________________________ Designer Mail isn't just fun to send, it's fun to receive. Use special stationery, fonts and colors. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines Start enjoying all the benefits of MSNŽ Premium right now and get the first two months FREE*.