Date: Sat, 21 Dec 1996 18:40:02 -0700 (MST) From: Marc Slemko <marcs@znep.com> To: Bill Fenner <fenner@parc.xerox.com> Cc: hackers@freebsd.org Subject: Re: TCP FIN/ACK storm oddity Message-ID: <Pine.BSF.3.95.961221182728.6958H-100000@alive.ampr.ab.ca> In-Reply-To: <96Dec15.223727pst.177711@crevenia.parc.xerox.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 15 Dec 1996, Bill Fenner wrote: > Sounds like what Peter Wemm saw in PR kern/1940. Hmm. Perhaps related somehow. > > Can you replicate the exchange from the second message, but use "tcpdump -S" > so that tcpdump doesn't try to be smart about the sequence numbers? A > "tcpdump -w" might be even better. > > Bill > The same exchange as in my previous message, but with -S: 03:49:01.543188 futurity.worldgate.com.telnet > darkly.worldgate.com.1701: F 541865:541865(0) ack 1325056048 win 2048 03:49:01.543392 darkly.worldgate.com.1701 > futurity.worldgate.com.telnet: F 1325056048:1325056048(0) ack 541866 win 17153 (DF) [tos 0x10] 03:49:01.544394 futurity.worldgate.com.telnet > darkly.worldgate.com.1701: . ack 1325056048 win 2048 03:49:01.544596 darkly.worldgate.com.1701 > futurity.worldgate.com.telnet: F 1325056048:1325056048(0) ack 541866 win 17153 (DF) [tos 0x10] 03:49:01.545666 futurity.worldgate.com.telnet > darkly.worldgate.com.1701: . ack 1325056048 win 2048 03:49:01.545877 darkly.worldgate.com.1701 > futurity.worldgate.com.telnet: F 1325056048:1325056048(0) ack 541866 win 17153 (DF) [tos 0x10] 03:49:01.547046 futurity.worldgate.com.telnet > darkly.worldgate.com.1701: . ack 1325056048 win 2048 When I try the same thing between a box running Solaris 2.5 and the Ascend, I get a somewhat similar situation except that the packets are _far_ less frequent. The test with Solaris was over a link with a much higher RTT (~90ms) which may or may not account for the difference. I let the Solaris box and the Ascend go on talking for days, and it simply wouldn't stop on its own. The raw log of the connection shown above was written to disk with -w, which is where I generated the above output from. I can make the raw log (~15 megs) available to anyone who wants to take a look. I am hoping to get the time to go through the connection step by step and state by state within the next few weeks.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.961221182728.6958H-100000>