From owner-freebsd-pf@FreeBSD.ORG Tue Mar 8 00:28:43 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DB8E216A4CE for ; Tue, 8 Mar 2005 00:28:42 +0000 (GMT) Received: from hotmail.com (bay24-f20.bay24.hotmail.com [64.4.18.70]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5878143D5E for ; Tue, 8 Mar 2005 00:28:42 +0000 (GMT) (envelope-from segr@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 7 Mar 2005 16:28:42 -0800 Message-ID: Received: from 204.9.110.182 by by24fd.bay24.hotmail.msn.com with HTTP; Tue, 08 Mar 2005 00:28:41 GMT X-Originating-IP: [204.9.110.182] X-Originating-Email: [segr@hotmail.com] X-Sender: segr@hotmail.com In-Reply-To: From: "Stephane Raimbault" To: segr@hotmail.com, daniel@benzedrine.cx Date: Mon, 07 Mar 2005 17:28:41 -0700 Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 08 Mar 2005 00:28:42.0176 (UTC) FILETIME=[C7E53400:01C52375] cc: freebsd-pf@freebsd.org Subject: Re: nat / rdr timeouts? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2005 00:28:43 -0000 Okay, I setup an OpenBSD 3.6 box with pf today as a test and I can not replicate the problem with OpenBSD. In fact, running the ab test returned MUCH beter results in terms of times to return the page and according to top the cpu barely budged when running the test on the openbsd pf box. However running top on the freebsd pf box I clearly see a spike in cpu traffic as the cpu idle drops to 0% for a second. I'm currently running RELENG_5 on the freebsd box from this weekend... are there some debugging stuff turned on in the kernel that would explain the performance diffrence? I tried to replicate the test as closely as possible however there are some subtle diffrences in my test. OpenBSD test PowerBook laptop (running ab) to an IP on the local network (openbsd ext interface (vlan0)) thru to the same openbsd box int interface (vlan1) to the web servers (10.0.11.16 and 10.0.11.17). FreeBSD Test IBM server running freebsd (ab) to an IP on it's local network (freebsd ext interface (em0) thru to the same freebsd box int interface (em1) to the web severs (10.0.11.16 and 10.0.11.17). network wise it should be pretty much the same. The only thing that came to mind, maybe it's because the powerbook is a better box then the IBM server running freebsd ? but then seeing the CPU idle time and comparing the Freebsd +pf and the OpenBSD +pf being so diffrent... I ponder my question. Hope this makes sense. Let me know if there is any other data I can provide ? Thanks, Stephane. >From: "Stephane Raimbault" >To: daniel@benzedrine.cx >CC: freebsd-pf@freebsd.org >Subject: Re: nat / rdr timeouts? >Date: Sat, 05 Mar 2005 23:08:31 -0700 > >Thanks for the response... my debug output is below. > >>From: Daniel Hartmeier >>To: Stephane Raimbault >>CC: freebsd-pf@freebsd.org >>Subject: Re: nat / rdr timeouts? >>Date: Sat, 5 Mar 2005 23:20:00 +0100 >> >>On Sat, Mar 05, 2005 at 02:57:56PM -0700, Stephane Raimbault wrote: >> >> > I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same >> > results. Do I need to recompile any other parts of the system? >> >>No, that's it. >> >> > Do we believe I've stumbled onto a bug of pf... or is this some sort of >> > anti-DoS feature? >> >>The default limit on number of states is 10,000. If further packets try >>to create state, they are dropped. But it doesn't look like you're >>hitting that. >> >>Enable debug loggin (pfctl -xm), reproduce the problem, then check >>/var/log/messages for anything from pf. >> > >Mar 5 23:17:56 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:17:56 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:17:59 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:17:59 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:18:02 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:18:02 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:18:05 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:18:05 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:18:09 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:18:09 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:18:12 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:18:12 lb1-dev kernel: pf: State failure on: 1 | 5 >Mar 5 23:18:18 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 >204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 >modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 >wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 >dir=in,fwd >Mar 5 23:18:18 lb1-dev kernel: pf: State failure on: 1 | 5 > > > >>Also quote pfctl -vvss output after the problem, as well as pfctl -si, >>please. >> > ># pfctl -vvss >No ALTQ support in kernel >ALTQ related functions disabled >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2561 >FIN_WAIT_2:FIN_WAIT_2 > [32585757 + 57920] wscale 0 [4030666851 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a29420000033f creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3073 >FIN_WAIT_2:FIN_WAIT_2 > [280614368 + 57920] wscale 0 [871170019 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000368 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1546 >FIN_WAIT_2:FIN_WAIT_2 > [318290820 + 57920] wscale 0 [3755105029 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000349 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3347 >FIN_WAIT_2:FIN_WAIT_2 > [1140076597 + 57920] wscale 0 [4121153694 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031b creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2836 >FIN_WAIT_2:FIN_WAIT_2 > [2909277378 + 57920] wscale 0 [448910790 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000370 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2327 >FIN_WAIT_2:FIN_WAIT_2 > [2987561263 + 57920] wscale 0 [4146806117 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000318 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2329 >FIN_WAIT_2:FIN_WAIT_2 > [1833281301 + 57920] wscale 0 [1053857949 + 57920] wscale 0 > age 00:00:59, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000327 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1818 >FIN_WAIT_2:FIN_WAIT_2 > [2636697734 + 57920] wscale 0 [2763808572 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000353 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4380 >FIN_WAIT_2:FIN_WAIT_2 > [1563439928 + 57920] wscale 0 [2156220237 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000375 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3613 >FIN_WAIT_2:FIN_WAIT_2 > [4269333757 + 57920] wscale 0 [28302277 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000325 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2334 >FIN_WAIT_2:FIN_WAIT_2 > [4236319117 + 57920] wscale 0 [756984446 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000376 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1570 >FIN_WAIT_2:FIN_WAIT_2 > [1467784327 + 57920] wscale 0 [1805572515 + 57920] wscale 0 > age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000389 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2854 >FIN_WAIT_2:FIN_WAIT_2 > [1264223110 + 57920] wscale 0 [3114805151 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000380 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2599 >FIN_WAIT_2:FIN_WAIT_2 > [2493007175 + 57920] wscale 0 [4071674965 + 57920] wscale 0 > age 00:00:58, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a29420000033b creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4647 >FIN_WAIT_2:FIN_WAIT_2 > [1519840616 + 57920] wscale 0 [1155588281 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000351 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2600 >FIN_WAIT_2:FIN_WAIT_2 > [3829938788 + 57920] wscale 0 [2288730060 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000346 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1323 >FIN_WAIT_2:FIN_WAIT_2 > [3299837026 + 57920] wscale 0 [571661919 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037f creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4139 >FIN_WAIT_2:FIN_WAIT_2 > [2936258233 + 57920] wscale 0 [3552485098 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1069 >FIN_WAIT_2:FIN_WAIT_2 > [3429734760 + 57920] wscale 0 [1047686037 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000350 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1582 >FIN_WAIT_2:FIN_WAIT_2 > [2239408408 + 57920] wscale 0 [792523365 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000356 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1839 >FIN_WAIT_2:FIN_WAIT_2 > [1084975327 + 57920] wscale 0 [3468075791 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035c creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4402 >FIN_WAIT_2:FIN_WAIT_2 > [1734033910 + 57920] wscale 0 [4212345601 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a29420000033c creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3636 >FIN_WAIT_2:FIN_WAIT_2 > [1247559674 + 57920] wscale 0 [3855641134 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036c creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4917 >FIN_WAIT_2:FIN_WAIT_2 > [2579269706 + 57920] wscale 0 [2765039414 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a294200000340 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1334 >FIN_WAIT_2:FIN_WAIT_2 > [1322299975 + 57920] wscale 0 [4143165048 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000352 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1593 >FIN_WAIT_2:FIN_WAIT_2 > [3145580381 + 57920] wscale 0 [1476283631 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000345 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2361 >TIME_WAIT:TIME_WAIT > [1651992099 + 57344] wscale 0 [1675199900 + 57345] wscale 0 > age 00:00:53, expires in 00:00:37, 2:1 pkts, 100:60 bytes > id: 422a294200000377 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3132 >FIN_WAIT_2:FIN_WAIT_2 > [54760795 + 57920] wscale 0 [685586651 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3388 >FIN_WAIT_2:FIN_WAIT_2 > [1740195130 + 57920] wscale 0 [2837513788 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000330 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4668 >FIN_WAIT_2:FIN_WAIT_2 > [4153305444 + 57920] wscale 0 [3657625607 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000362 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2110 >FIN_WAIT_2:FIN_WAIT_2 > [1680438376 + 57920] wscale 0 [4124389714 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032b creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4927 >FIN_WAIT_2:FIN_WAIT_2 > [3926918789 + 57920] wscale 0 [1578868844 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032f creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2369 >FIN_WAIT_2:FIN_WAIT_2 > [3264887916 + 57920] wscale 0 [1040383065 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000373 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3138 >FIN_WAIT_2:FIN_WAIT_2 > [3668537022 + 57920] wscale 0 [4070704551 + 57920] wscale 0 > age 00:00:51, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000384 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4677 >FIN_WAIT_2:FIN_WAIT_2 > [4255514426 + 57920] wscale 0 [2108554394 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031e creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1351 >FIN_WAIT_2:FIN_WAIT_2 > [650459315 + 57920] wscale 0 [3007417138 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035d creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4935 >FIN_WAIT_2:FIN_WAIT_2 > [2640203207 + 57920] wscale 0 [1946606900 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1864 >FIN_WAIT_2:FIN_WAIT_2 > [302555830 + 57920] wscale 0 [4259092904 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4936 >FIN_WAIT_2:FIN_WAIT_2 > [3747285884 + 57920] wscale 0 [1707501039 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000364 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4426 >FIN_WAIT_2:FIN_WAIT_2 > [4052825702 + 57920] wscale 0 [1998932217 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4429 >FIN_WAIT_2:FIN_WAIT_2 > [2963041429 + 57920] wscale 0 [2854499682 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000328 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4941 >FIN_WAIT_2:FIN_WAIT_2 > [363310172 + 57920] wscale 0 [1840047747 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000331 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1871 >FIN_WAIT_2:FIN_WAIT_2 > [1551203117 + 57920] wscale 0 [1422169461 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000329 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3152 >FIN_WAIT_2:FIN_WAIT_2 > [1387806479 + 57920] wscale 0 [1346138440 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000320 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4944 >FIN_WAIT_2:FIN_WAIT_2 > [2112290315 + 57920] wscale 0 [3096897628 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037e creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3921 >FIN_WAIT_2:FIN_WAIT_2 > [2276016873 + 57920] wscale 0 [2659410744 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000333 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4692 >FIN_WAIT_2:FIN_WAIT_2 > [4210818300 + 57920] wscale 0 [3178408136 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000319 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4696 >FIN_WAIT_2:FIN_WAIT_2 > [3697003529 + 57920] wscale 0 [1024494100 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000336 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1116 >FIN_WAIT_2:FIN_WAIT_2 > [2568047902 + 57920] wscale 0 [2313094524 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000383 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1372 >FIN_WAIT_2:FIN_WAIT_2 > [2263179419 + 57920] wscale 0 [665532303 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035b creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1119 >FIN_WAIT_2:FIN_WAIT_2 > [3415385225 + 57920] wscale 0 [1370230622 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000382 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3938 >FIN_WAIT_2:FIN_WAIT_2 > [3603803766 + 57920] wscale 0 [276202704 + 57920] wscale 0 > age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000386 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4456 >FIN_WAIT_2:FIN_WAIT_2 > [48494854 + 57920] wscale 0 [1301768752 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032e creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2153 >FIN_WAIT_2:FIN_WAIT_2 > [2753680443 + 57920] wscale 0 [557071720 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031f creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4714 >FIN_WAIT_2:FIN_WAIT_2 > [1504808638 + 57920] wscale 0 [2927860233 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000033a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3693 >FIN_WAIT_2:FIN_WAIT_2 > [416273073 + 57920] wscale 0 [4216442984 + 57920] wscale 0 > age 00:01:00, expires in 00:00:30, 5:4 pkts, 363:508 bytes > id: 422a294200000312 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2159 >FIN_WAIT_2:FIN_WAIT_2 > [617626453 + 57920] wscale 0 [3344368062 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000321 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3951 >FIN_WAIT_2:FIN_WAIT_2 > [2792267335 + 57920] wscale 0 [997036292 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000379 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2673 >FIN_WAIT_2:FIN_WAIT_2 > [4169187362 + 57920] wscale 0 [2600215828 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000332 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3698 >FIN_WAIT_2:FIN_WAIT_2 > [4173377263 + 57920] wscale 0 [113027635 + 57920] wscale 0 > age 00:00:55, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000355 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2169 >FIN_WAIT_2:FIN_WAIT_2 > [3490211889 + 57920] wscale 0 [2950876502 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037c creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2937 >FIN_WAIT_2:FIN_WAIT_2 > [978963795 + 57920] wscale 0 [1899890588 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000354 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4473 >FIN_WAIT_2:FIN_WAIT_2 > [20706720 + 57920] wscale 0 [308909836 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000315 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3706 >FIN_WAIT_2:FIN_WAIT_2 > [1571667015 + 57920] wscale 0 [3670251619 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000381 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4732 >FIN_WAIT_2:FIN_WAIT_2 > [558353217 + 57920] wscale 0 [1843229679 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000339 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1150 >FIN_WAIT_2:FIN_WAIT_2 > [69371452 + 57920] wscale 0 [2527043649 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034e creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4738 >FIN_WAIT_2:FIN_WAIT_2 > [3004764914 + 57920] wscale 0 [3140248529 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035f creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1155 >FIN_WAIT_2:FIN_WAIT_2 > [1742408037 + 57920] wscale 0 [217529573 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000359 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4996 >FIN_WAIT_2:FIN_WAIT_2 > [3353863411 + 57920] wscale 0 [2037795993 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a29420000033d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2438 >FIN_WAIT_2:FIN_WAIT_2 > [2363515767 + 57920] wscale 0 [940185069 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2440 >FIN_WAIT_2:FIN_WAIT_2 > [1512264113 + 57920] wscale 0 [1583872006 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000326 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3977 >FIN_WAIT_2:FIN_WAIT_2 > [3375214689 + 57920] wscale 0 [3340380428 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000338 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2442 >FIN_WAIT_2:FIN_WAIT_2 > [366541085 + 57920] wscale 0 [4229618380 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000365 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2955 >FIN_WAIT_2:FIN_WAIT_2 > [3023032248 + 57920] wscale 0 [2714578033 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037b creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1676 >FIN_WAIT_2:FIN_WAIT_2 > [2143584703 + 57920] wscale 0 [2632152330 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000334 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2957 >FIN_WAIT_2:FIN_WAIT_2 > [3376655763 + 57920] wscale 0 [1962882777 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2959 >FIN_WAIT_2:FIN_WAIT_2 > [2381496694 + 57920] wscale 0 [3907940618 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036e creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2193 >FIN_WAIT_2:FIN_WAIT_2 > [1147009346 + 57920] wscale 0 [652578834 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031c creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1173 >FIN_WAIT_2:FIN_WAIT_2 > [3847048096 + 57920] wscale 0 [4202192232 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000367 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2966 >FIN_WAIT_2:FIN_WAIT_2 > [1704883050 + 57920] wscale 0 [397640671 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034b creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1176 >FIN_WAIT_2:FIN_WAIT_2 > [2908611795 + 57920] wscale 0 [1143955128 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034f creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3225 >TIME_WAIT:TIME_WAIT > [4053421973 + 57344] wscale 0 [1116197573 + 57345] wscale 0 > age 00:00:57, expires in 00:00:33, 2:1 pkts, 100:60 bytes > id: 422a294200000344 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3227 >FIN_WAIT_2:FIN_WAIT_2 > [3697384915 + 57920] wscale 0 [4194776544 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000323 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4764 >FIN_WAIT_2:FIN_WAIT_2 > [3426015243 + 57920] wscale 0 [3468954857 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a29420000031a creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2721 >FIN_WAIT_2:FIN_WAIT_2 > [3210917859 + 57920] wscale 0 [501355691 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a29420000035e creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2214 >FIN_WAIT_2:FIN_WAIT_2 > [2024368372 + 57920] wscale 0 [1315702046 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2983 >FIN_WAIT_2:FIN_WAIT_2 > [3207150264 + 57920] wscale 0 [2168442372 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a294200000342 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4263 >FIN_WAIT_2:FIN_WAIT_2 > [46597085 + 57920] wscale 0 [4061701497 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a29420000032c creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2984 >FIN_WAIT_2:FIN_WAIT_2 > [785309605 + 57920] wscale 0 [178732332 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000335 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4265 >FIN_WAIT_2:FIN_WAIT_2 > [1077034523 + 57920] wscale 0 [508685133 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000347 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2474 >FIN_WAIT_2:FIN_WAIT_2 > [3579823839 + 57920] wscale 0 [3186549033 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000317 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3501 >FIN_WAIT_2:FIN_WAIT_2 > [830389565 + 57920] wscale 0 [3726843152 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000366 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4785 >FIN_WAIT_2:FIN_WAIT_2 > [2419913039 + 57920] wscale 0 [2289781021 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a294200000348 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3511 >FIN_WAIT_2:FIN_WAIT_2 > [2249296099 + 57920] wscale 0 [2932871839 + 57920] wscale 0 > age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000385 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4794 >FIN_WAIT_2:FIN_WAIT_2 > [3411371868 + 57920] wscale 0 [2783458838 + 57920] wscale 0 > age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000387 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4539 >FIN_WAIT_2:FIN_WAIT_2 > [1104604839 + 57920] wscale 0 [2842567409 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a29420000033e creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3519 >FIN_WAIT_2:FIN_WAIT_2 > [3740703471 + 57920] wscale 0 [87932817 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000374 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3521 >FIN_WAIT_2:FIN_WAIT_2 > [2968103458 + 57920] wscale 0 [3601469586 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000316 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2249 >FIN_WAIT_2:FIN_WAIT_2 > [482606504 + 57920] wscale 0 [2208108060 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000372 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1994 >FIN_WAIT_2:FIN_WAIT_2 > [39371535 + 57920] wscale 0 [3193833702 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000314 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4818 >FIN_WAIT_2:FIN_WAIT_2 > [1810505629 + 57920] wscale 0 [2489348362 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000371 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1238 >FIN_WAIT_2:FIN_WAIT_2 > [1759844756 + 57920] wscale 0 [1414167188 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a294200000378 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2262 >FIN_WAIT_2:FIN_WAIT_2 > [837001507 + 57920] wscale 0 [3660905760 + 57920] wscale 0 > age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes > id: 422a29420000037d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3030 >FIN_WAIT_2:FIN_WAIT_2 > [2939379438 + 57920] wscale 0 [2989656088 + 57920] wscale 0 > age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes > id: 422a294200000388 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4566 >FIN_WAIT_2:FIN_WAIT_2 > [36874042 + 57920] wscale 0 [1489690186 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036d creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3033 >FIN_WAIT_2:FIN_WAIT_2 > [894623290 + 57920] wscale 0 [1705678299 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000324 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4058 >FIN_WAIT_2:FIN_WAIT_2 > [3593573975 + 57920] wscale 0 [4218672704 + 57920] wscale 0 > age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000322 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1499 >FIN_WAIT_2:FIN_WAIT_2 > [3353910087 + 57920] wscale 0 [2313641214 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000361 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1244 >FIN_WAIT_2:FIN_WAIT_2 > [2144658656 + 57920] wscale 0 [3510611502 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000360 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3551 >FIN_WAIT_2:FIN_WAIT_2 > [3266650438 + 57920] wscale 0 [1463919518 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036b creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4064 >FIN_WAIT_2:FIN_WAIT_2 > [480151856 + 57920] wscale 0 [111602781 + 57920] wscale 0 > age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes > id: 422a29420000034c creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3041 >FIN_WAIT_2:FIN_WAIT_2 > [3790883218 + 57920] wscale 0 [1635610553 + 57920] wscale 0 > age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes > id: 422a294200000337 creatorid: 0f363004 >self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2786 >FIN_WAIT_2:FIN_WAIT_2 > [1503037157 + 57920] wscale 0 [2999158633 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000358 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4837 >FIN_WAIT_2:FIN_WAIT_2 > [3904040791 + 57920] wscale 0 [1708743304 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a294200000343 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3561 >FIN_WAIT_2:FIN_WAIT_2 > [760186488 + 57920] wscale 0 [3036802596 + 57920] wscale 0 > age 00:01:00, expires in 00:00:31, 5:4 pkts, 363:508 bytes > id: 422a294200000313 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1258 >FIN_WAIT_2:FIN_WAIT_2 > [283551952 + 57920] wscale 0 [2454096152 + 57920] wscale 0 > age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a29420000036f creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4590 >FIN_WAIT_2:FIN_WAIT_2 > [1656348739 + 57920] wscale 0 [1476131618 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000363 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1785 >FIN_WAIT_2:FIN_WAIT_2 > [378495766 + 57920] wscale 0 [449574348 + 57920] wscale 0 > age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes > id: 422a294200000357 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4601 >FIN_WAIT_2:FIN_WAIT_2 > [3216638735 + 57920] wscale 0 [2886955349 + 57920] wscale 0 > age 00:00:54, expires in 00:00:37, 5:4 pkts, 363:508 bytes > id: 422a294200000369 creatorid: 0f363004 >self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4093 >FIN_WAIT_2:FIN_WAIT_2 > [3263818736 + 57920] wscale 0 [2611351584 + 57920] wscale 0 > age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes > id: 422a294200000341 creatorid: 0f363004 > > > ># pfctl -si >No ALTQ support in kernel >ALTQ related functions disabled >Status: Enabled for 0 days 08:31:15 Debug: Misc > >Hostid: 0x0f363004 > >State Table Total Rate > current entries 0 > searches 49637 1.6/s > inserts 906 0.0/s > removals 906 0.0/s >Counters > match 42759 1.4/s > bad-offset 0 0.0/s > fragment 0 0.0/s > short 0 0.0/s > normalize 0 0.0/s > memory 0 0.0/s > > >I might of run the pfctl -si to late after the test... I re-ran the test >and when I got the symptoms again I rerans the pfctl -si output: > ># pfctl -si >No ALTQ support in kernel >ALTQ related functions disabled >Status: Enabled for 0 days 08:33:18 Debug: Misc > >Hostid: 0x0f363004 > >State Table Total Rate > current entries 53 > searches 50837 1.7/s > inserts 959 0.0/s > removals 906 0.0/s >Counters > match 43534 1.4/s > bad-offset 0 0.0/s > fragment 0 0.0/s > short 0 0.0/s > normalize 0 0.0/s > memory 0 0.0/s > > >>Daniel > >Thank you, >Stephane. > >_________________________________________________________________ >Designer Mail isn't just fun to send, it's fun to receive. Use special >stationery, fonts and colors. >http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines > Start enjoying all the benefits of MSNŽ Premium right now and get the >first two months FREE*. > >_______________________________________________ >freebsd-pf@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-pf >To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" _________________________________________________________________ Powerful Parental Controls Let your child discover the best the Internet has to offer. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines Start enjoying all the benefits of MSNŽ Premium right now and get the first two months FREE*.