From owner-freebsd-net@FreeBSD.ORG Fri Mar 7 04:33:11 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9B0A71065670 for ; Fri, 7 Mar 2008 04:33:11 +0000 (UTC) (envelope-from _lion_2000@mail.ru) Received: from ards.ru (mail.ards.ru [212.76.164.163]) by mx1.freebsd.org (Postfix) with SMTP id CC3B98FC1C for ; Fri, 7 Mar 2008 04:33:10 +0000 (UTC) (envelope-from _lion_2000@mail.ru) Received: (qmail 14287 invoked by uid 0); 7 Mar 2008 09:33:09 +0500 Received: from (10.1.201.55); 7 Mar 2008 04:33:09 -0000 X-lion-scan: 0 X-lion-envelope: F_lion_2000@mail.ru Tfreebsd-net@freebsd.org X-RELAYCLIENT: 1 Received: from wtm-ards-itoa01.net.ards.corp (HELO wtmardsITOA01) (10.1.201.55) by mail.net.ards.corp with SMTP; 7 Mar 2008 09:33:09 +0500 From: "Sergey" <_lion_2000@mail.ru> To: References: <000001c87f43$c8075800$37c9010a@Net.ARDS.Corp><20080306161818.GD15130@verio.net> <001101c8800a$596d4220$37c9010a@Net.ARDS.Corp> Date: Fri, 7 Mar 2008 09:33:09 +0500 Message-ID: <001e01c8800c$587059a0$37c9010a@Net.ARDS.Corp> MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <001101c8800a$596d4220$37c9010a@Net.ARDS.Corp> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 Thread-Index: Ach/qQPMwdmhNDt7SEKSSxXiz74OOgAYPJnAAABfT+A= Subject: RE: Path MTU Problem X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Mar 2008 04:33:11 -0000 > > > here comes icmp frag packets. strange what sometimes > > tcpdump complains > > > about tcp header in icmp packet and sometimes not After looking more closely, if found something strange: here is part of tcp header of first large packet: 10:32:04.610317 IP (tos 0x8, ttl 64, id 1208, offset 0, flags [DF], proto: TCP (6), length: 1420) 10.23.0.241.22 > 10.35.1.3.60122: . 2064:3432(1368) ack 1666 win 32832 0x0000: 4508 058c 04b8 4000 4006 1a7f 0a17 00f1 E.....@.@....... 0x0010: 0a23 0103 0016 eada 5c06 97bb 6284 63e5 .#......\...b.c. take note of numbers after port numbers:------------------------^^^^^^^^^ And now look at bytes in ICMP packet: 10:32:04.612895 IP (tos 0x0, ttl 254, id 15170, offset 0, flags [none], proto: ICMP (1), length: 56) 10.23.5.3 > 10.23.0.241: ICMP 10.35.1.3 unreachable - need to frag (mtu 1280), length 36 IP (tos 0x8, ttl 61, id 1208, offset 0, flags [DF], proto: TCP (6), length: 1420) 10.23.0.241.22 > 10.35.1.3.60122: tcp 1396 [bad hdr length 4 - too short, < 20] 0x0000: 4500 0038 3b42 0000 fe01 6761 0a17 0503 E..8;B....ga.... 0x0010: 0a17 00f1 0304 479f 0000 0500 4508 058c ......G.....E... 0x0020: 04b8 4000 3d06 1d7f 0a17 00f1 0a23 0103 ..@.=........#.. 0x0030: 0016 eada c207 0364 .......d here:----------------------^^^^^^^^^ Can they be different? Are they taken into account when doing PathMTU ?