From owner-freebsd-hackers Tue Sep 16 09:15:29 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id JAA02941 for hackers-outgoing; Tue, 16 Sep 1997 09:15:29 -0700 (PDT) Received: from innocence.interface-business.de (innocence.interface-business.de [193.101.57.202]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id JAA02936 for ; Tue, 16 Sep 1997 09:15:24 -0700 (PDT) Received: from ida.interface-business.de (ida.interface-business.de [193.101.57.203]) by innocence.interface-business.de (8.6.11/8.6.9) with SMTP id SAA29256; Tue, 16 Sep 1997 18:15:11 +0200 Received: (from j@localhost) by ida.interface-business.de (8.8.7/8.7.3) id SAA06307; Tue, 16 Sep 1997 18:15:11 +0200 (MET DST) Message-ID: <19970916181510.OK51303@ida.interface-business.de> Date: Tue, 16 Sep 1997 18:15:10 +0200 From: j@ida.interface-business.de (J Wunsch) To: fenner@parc.xerox.com (Bill Fenner) Cc: freebsd-hackers@freebsd.org (FreeBSD hackers) Subject: Re: Any TCP expert around? References: <19970916163525.KH02502@ida.interface-business.de> <97Sep16.090625pdt.177486@crevenia.parc.xerox.com> X-Mailer: Mutt 0.60_p2-3,5,8-9 Mime-Version: 1.0 X-Phone: +49-351-31809-14 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Organization: interface business GmbH, Dresden Reply-To: joerg_wunsch@interface-business.de (Joerg Wunsch) Sender: owner-freebsd-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As Bill Fenner wrote: > Your server sends two different SYN/ACK replies back, both with > different initial sequence numbers, and then starts sending data with a > third different sequence number. FreeBSD ignores the second SYN/ACK > because it's outside of the window, and it ignores all of the data > packets because they're outside of the window. Well, no. This is merely misreading since tcpdump adjusts its idea of the base sequence number for the connection after seeing the second SYN. As i wrote you in the private mail, a tcpdump with absolute sequence numbers shows that the server is actually later using the sequence number space it suggested in its first SYN. So i think the BSD implementation is in error, since it never re-synchronizes after getting the bogus SYN packet. > >What makes me a little nervous is the couple of packets sent by the > >FreeBSD side at 15:39.54.132386 and 15:39:54.133176. Why are there > >two packets? > I'm confused - the two packets that you referenced were from different > machines. Well, i was confused, and didn't look close enough at first. I later realized that the actual problem is starting with the bogus SYN received from the server. -- J"org Wunsch Unix support engineer joerg_wunsch@interface-business.de http://www.interface-business.de/~j