From owner-freebsd-net@FreeBSD.ORG Mon Apr 5 15:14:50 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 97B7A16A4CE for ; Mon, 5 Apr 2004 15:14:50 -0700 (PDT) Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch [62.48.0.70]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0D5C643D4C for ; Mon, 5 Apr 2004 15:14:50 -0700 (PDT) (envelope-from andre@freebsd.org) Received: (qmail 72766 invoked from network); 5 Apr 2004 22:14:47 -0000 Received: from unknown (HELO freebsd.org) ([62.48.0.53]) (envelope-sender ) by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP for ; 5 Apr 2004 22:14:47 -0000 Message-ID: <4071DA57.D67316AD@freebsd.org> Date: Tue, 06 Apr 2004 00:14:47 +0200 From: Andre Oppermann X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Julian Elischer References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: Brandon Erhart cc: freebsd-net@freebsd.org Subject: Re: FIN_WAIT_[1,2] and LAST_ACK X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Apr 2004 22:14:50 -0000 Julian Elischer wrote: > On the topic of Session shutdown... > > I have noticed an increasing number of machines on the net > are terminating their session (usually the server, but not always) > with a RESET packet instead of a FIN packet. > In particular it seems that if the machine in question recieves > a FIN packet, and has no more data to send, it replies with > a RESET. > > I don't know what kind of machines this is but next time I see it I > guess I'll look at it harder. I'd guess that are stateful firewalls in the path doing that. But finding it out with proof is better. -- Andre