From owner-freebsd-hackers@FreeBSD.ORG Mon Jan 31 16:30:10 2005 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6282316A532 for ; Mon, 31 Jan 2005 16:30:10 +0000 (GMT) Received: from mx.hostarica.com (www2.hostarica.com [196.40.45.74]) by mx1.FreeBSD.org (Postfix) with ESMTP id 87A3643D49 for ; Mon, 31 Jan 2005 16:30:07 +0000 (GMT) (envelope-from jose@hostarica.com) Received: from localhost (localhost.hostarica.com [127.0.0.1]) by mx.hostarica.com (Postfix) with ESMTP id 26821F7DC for ; Mon, 31 Jan 2005 10:41:12 -0600 (CST) Received: from localhost.localdomain (jose.hostarica.net [192.168.0.69]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by mx.hostarica.com (Postfix) with ESMTP id DEFDBF7C7 for ; Mon, 31 Jan 2005 10:41:10 -0600 (CST) From: Jose Hidalgo Herrera To: Hackers-FreeBSD Content-Type: text/plain Organization: Corp. Hostarica Date: Mon, 31 Jan 2005 10:30:05 -0600 Message-Id: <1107189005.88247.23.camel@jose.hostarica.net> Mime-Version: 1.0 X-Mailer: Evolution 2.0.2 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd 0.1 Subject: TCP stack errors X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: jose@hostarica.com List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jan 2005 16:30:10 -0000 I have a 4.10p5 (cvsuped with RELENG_4_10 last friday) that shows things like this with a netstat -sf inet: tcp: 3630 discarded for bad checksums 85 discarded for bad header offset fields 1220093 bad connection attempts 137097 embryonic connections dropped udp: 7 with bad checksum the complete netstat can be found in: http://www1.cr.freebsd.org/~jose/netstat-sf One can assume that the server is that target for some stupid guy, BUT the thing is that IS the server the one SENDING the miscalculated packages. I saw that with sshd connections, smtps, auths, etc.., the client sent the handshake but the server was replying with wrong packages. It occurs with different window-sizes, different flags, the network card is an em: em1: flags=8843 mtu 1500 options=3 media: Ethernet autoselect (100baseTX ) with two ip addresses in the same subnet (alias with /32 netmask) no hardware failures reported. It sends bad packages from both addresses. Is there any bug I'm not aware of with this driver ? -- Jose Hidalgo Herrera Corp. Hostarica