Date: Wed, 15 Aug 2007 17:37:26 +0300 From: Stefan Lambrev <stefan.lambrev@moneybookers.com> To: Kris Kennaway <kris@obsecurity.org> Cc: current@freebsd.org Subject: Re: "tcpflags 0x18<PUSH,ACK>; tcp_do_segment" kernel messages Message-ID: <46C30FA6.7060108@moneybookers.com> In-Reply-To: <20070814193150.GA21553@rot26.obsecurity.org> References: <20070806224112.GA21876@muon.bluestop.org> <20070807073920.GV50228@void.codelabs.ru> <46C18B60.8050400@moneybookers.com> <20070814145759.GB25169@void.codelabs.ru> <20070814193150.GA21553@rot26.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello, Kris Kennaway wrote: > On Tue, Aug 14, 2007 at 06:57:59PM +0400, Eygene Ryabinkin wrote: > >> Stefan, good day. >> >> Tue, Aug 14, 2007 at 02:00:48PM +0300, Stefan Lambrev wrote: >> >>>> If you were running -CURRENT on the same machine prior to CVSupping, >>>> then you probably saw the 'Spurious RST' messages. They were >>>> provoked by the same situation. The messages themselves are harmless, >>>> >>>> >>> This is not harmless here :( >>> >> Yep, sorry. What I meant is that 'I had no problems with them' ;)) >> >> >>> I'm running current from today 14.Aug. >>> I use an network applications that hangs every time when I see such a message. >>> >>> Any ideas how can I debug, or help to someone who is familiar with the code ? >>> >> You can provide the tcpdump's raw dump of the session (sniffed with >> the -s 1500 or whatever MTU you have). This may sched some light. >> > > Now I have a tcpdump.out file and all packets are logged while this problem happened. Here is part of the file (I hope this is enough because the file itself is +150MB) : 16:09:30.747276 IP 192.168.13.7.50603 > 192.168.13.4.25: S 1951617849:1951617849(0) win 65535 <mss 1460,nop,wscale 8,sackOK,timestamp 108105150 0> 16:09:30.747473 IP 192.168.13.4.25 > 192.168.13.7.50603: S 1766623039:1766623039(0) ack 1951617850 win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 3042126881 108105150,sackOK,eol> 16:09:30.747502 IP 192.168.13.7.50603 > 192.168.13.4.25: . ack 1 win 260 <nop,nop,timestamp 108105151 3042126881> 16:09:30.748936 IP 192.168.13.4.25 > 192.168.13.7.50603: P 1:48(47) ack 1 win 33304 <nop,nop,timestamp 3042126882 108105151> 16:09:30.749023 IP 192.168.13.7.50603 > 192.168.13.4.25: P 1:29(28) ack 48 win 260 <nop,nop,timestamp 108105152 3042126882> 16:09:30.749377 IP 192.168.13.4.25 > 192.168.13.7.50603: P 48:181(133) ack 29 win 33304 <nop,nop,timestamp 3042126883 108105152> 16:09:30.749490 IP 192.168.13.7.50603 > 192.168.13.4.25: P 29:70(41) ack 181 win 260 <nop,nop,timestamp 108105153 3042126883> 16:09:30.749817 IP 192.168.13.4.25 > 192.168.13.7.50603: P 181:195(14) ack 70 win 33304 <nop,nop,timestamp 3042126883 108105153> 16:09:30.749878 IP 192.168.13.7.50603 > 192.168.13.4.25: P 70:95(25) ack 195 win 260 <nop,nop,timestamp 108105153 3042126883> 16:09:30.751282 IP 192.168.13.4.25 > 192.168.13.7.50603: P 195:209(14) ack 95 win 33304 <nop,nop,timestamp 3042126885 108105153> 16:09:30.751377 IP 192.168.13.7.50603 > 192.168.13.4.25: P 95:101(6) ack 209 win 260 <nop,nop,timestamp 108105155 3042126885> 16:09:30.752015 IP 192.168.13.4.25 > 192.168.13.7.50603: P 209:246(37) ack 101 win 33304 <nop,nop,timestamp 3042126885 108105155> 16:09:30.752567 IP 192.168.13.7.50603 > 192.168.13.4.25: P 101:125(24) ack 246 win 260 <nop,nop,timestamp 108105156 3042126885> 16:09:30.753304 IP 192.168.13.7.50603 > 192.168.13.4.25: . 125:1573(1448) ack 246 win 260 <nop,nop,timestamp 108105156 3042126885> 16:09:30.753629 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 1573 win 32580 <nop,nop,timestamp 3042126887 108105156> 16:09:30.753647 IP 192.168.13.7.50603 > 192.168.13.4.25: P 1573:2590(1017) ack 246 win 260 <nop,nop,timestamp 108105157 3042126887> 16:09:30.754749 IP 192.168.13.7.50603 > 192.168.13.4.25: . 2590:4038(1448) ack 246 win 260 <nop,nop,timestamp 108105158 3042126887> 16:09:30.754946 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 4038 win 32580 <nop,nop,timestamp 3042126888 108105157> 16:09:30.754960 IP 192.168.13.7.50603 > 192.168.13.4.25: P 4038:4563(525) ack 246 win 260 <nop,nop,timestamp 108105158 3042126888> 16:09:30.755509 IP 192.168.13.7.50603 > 192.168.13.4.25: . 4563:6011(1448) ack 246 win 260 <nop,nop,timestamp 108105159 3042126888> 16:09:30.755681 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 6011 win 32580 <nop,nop,timestamp 3042126889 108105158> 16:09:30.755695 IP 192.168.13.7.50603 > 192.168.13.4.25: P 6011:6483(472) ack 246 win 260 <nop,nop,timestamp 108105159 3042126889> 16:09:30.756247 IP 192.168.13.7.50603 > 192.168.13.4.25: . 6483:7931(1448) ack 246 win 260 <nop,nop,timestamp 108105159 3042126889> 16:09:30.756418 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 7931 win 32580 <nop,nop,timestamp 3042126890 108105159> 16:09:30.756431 IP 192.168.13.7.50603 > 192.168.13.4.25: P 7931:8403(472) ack 246 win 260 <nop,nop,timestamp 108105160 3042126890> 16:09:30.757007 IP 192.168.13.7.50603 > 192.168.13.4.25: . 8403:9851(1448) ack 246 win 260 <nop,nop,timestamp 108105160 3042126890> 16:09:30.757151 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 9851 win 32580 <nop,nop,timestamp 3042126891 108105160> 16:09:30.757164 IP 192.168.13.7.50603 > 192.168.13.4.25: P 9851:10151(300) ack 246 win 260 <nop,nop,timestamp 108105160 3042126891> 16:09:30.757673 IP 192.168.13.7.50603 > 192.168.13.4.25: . 10151:11599(1448) ack 246 win 260 <nop,nop,timestamp 108105161 3042126891> 16:09:30.757886 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 11599 win 32580 <nop,nop,timestamp 3042126891 108105160> 16:09:30.757898 IP 192.168.13.7.50603 > 192.168.13.4.25: P 11599:12199(600) ack 246 win 260 <nop,nop,timestamp 108105161 3042126891> 16:09:30.758373 IP 192.168.13.7.50603 > 192.168.13.4.25: . 12199:13647(1448) ack 246 win 260 <nop,nop,timestamp 108105162 3042126891> 16:09:30.758620 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 13647 win 32580 <nop,nop,timestamp 3042126892 108105161> 16:09:30.758633 IP 192.168.13.7.50603 > 192.168.13.4.25: P 13647:14444(797) ack 246 win 260 <nop,nop,timestamp 108105162 3042126892> 16:09:30.758984 IP 192.168.13.7.50603 > 192.168.13.4.25: . 14444:15892(1448) ack 246 win 260 <nop,nop,timestamp 108105162 3042126892> 16:09:30.759208 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 15892 win 32580 <nop,nop,timestamp 3042126893 108105162> 16:09:30.759219 IP 192.168.13.7.50603 > 192.168.13.4.25: P 15892:16716(824) ack 246 win 260 <nop,nop,timestamp 108105162 3042126893> 16:09:30.759722 IP 192.168.13.7.50603 > 192.168.13.4.25: . 16716:18164(1448) ack 246 win 260 <nop,nop,timestamp 108105163 3042126893> 16:09:30.759941 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 18164 win 32580 <nop,nop,timestamp 3042126893 108105162> 16:09:30.759954 IP 192.168.13.7.50603 > 192.168.13.4.25: P 18164:18734(570) ack 246 win 260 <nop,nop,timestamp 108105163 3042126893> 16:09:30.760348 IP 192.168.13.7.50603 > 192.168.13.4.25: . 18734:20182(1448) ack 246 win 260 <nop,nop,timestamp 108105164 3042126893> 16:09:30.760530 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 20182 win 32580 <nop,nop,timestamp 3042126894 108105163> 16:09:30.760543 IP 192.168.13.7.50603 > 192.168.13.4.25: P 20182:20631(449) ack 246 win 260 <nop,nop,timestamp 108105164 3042126894> 16:09:30.761072 IP 192.168.13.7.50603 > 192.168.13.4.25: . 20631:22079(1448) ack 246 win 260 <nop,nop,timestamp 108105164 3042126894> 16:09:30.761259 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 22079 win 32580 <nop,nop,timestamp 3042126895 108105164> 16:09:30.761272 IP 192.168.13.7.50603 > 192.168.13.4.25: P 22079:22560(481) ack 246 win 260 <nop,nop,timestamp 108105164 3042126895> 16:09:30.761972 IP 192.168.13.7.50603 > 192.168.13.4.25: . 22560:24008(1448) ack 246 win 260 <nop,nop,timestamp 108105165 3042126895> 16:09:30.762139 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 24008 win 32580 <nop,nop,timestamp 3042126896 108105164> 16:09:30.762153 IP 192.168.13.7.50603 > 192.168.13.4.25: P 24008:24658(650) ack 246 win 260 <nop,nop,timestamp 108105165 3042126896> 16:09:30.862086 IP 192.168.13.4.25 > 192.168.13.7.50603: . ack 24658 win 33304 <nop,nop,timestamp 3042126996 108105165> 16:09:30.862098 IP 192.168.13.7.50603 > 192.168.13.4.25: P 24658:24847(189) ack 246 win 260 <nop,nop,timestamp 108105265 3042126996> 16:09:30.888262 IP 192.168.13.4.25 > 192.168.13.7.50603: P 246:283(37) ack 24847 win 33304 <nop,nop,timestamp 3042127022 108105265> 16:09:30.888512 IP 192.168.13.7.50603 > 192.168.13.4.25: P 24847:24853(6) ack 283 win 260 <nop,nop,timestamp 108105292 3042127022> 16:09:30.888995 IP 192.168.13.4.25 > 192.168.13.7.50603: P 283:298(15) ack 24853 win 33304 <nop,nop,timestamp 3042127022 108105292> 16:09:30.889055 IP 192.168.13.7.50603 > 192.168.13.4.25: F 24853:24853(0) ack 298 win 260 <nop,nop,timestamp 108105292 3042127022> 16:09:30.889151 IP 192.168.13.4.25 > 192.168.13.7.50603: F 298:298(0) ack 24853 win 33304 <nop,nop,timestamp 3042127022 108105292> 16:09:30.889290 IP 192.168.13.4.25 > 192.168.13.7.50603: F 298:298(0) ack 24854 win 33304 <nop,nop,timestamp 3042127023 108105292> 16:09:30.889309 IP 192.168.13.7.50603 > 192.168.13.4.25: . ack 299 win 260 <nop,nop,timestamp 108105292 3042127023> connection closed and opened again ? 16:09:30.940328 IP 192.168.13.7.59206 > 192.168.13.4.25: S 823245446:823245446(0) win 65535 <mss 1460,nop,wscale 8,sackOK,timestamp 108105344 0> 16:09:30.940624 IP 192.168.13.4.25 > 192.168.13.7.59206: S 823705952:823705952(0) ack 823245447 win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 3042127074 108105344,sackOK,eol> 16:09:30.940667 IP 192.168.13.7.59206 > 192.168.13.4.25: . ack 1 win 260 <nop,nop,timestamp 108105344 3042127074> 16:09:30.942087 IP 192.168.13.4.25 > 192.168.13.7.59206: P 1:48(47) ack 1 win 33304 <nop,nop,timestamp 3042127075 108105344> 16:09:30.942180 IP 192.168.13.7.59206 > 192.168.13.4.25: P 1:29(28) ack 48 win 260 <nop,nop,timestamp 108105345 3042127075> 16:09:30.942528 IP 192.168.13.4.25 > 192.168.13.7.59206: P 48:181(133) ack 29 win 33304 <nop,nop,timestamp 3042127076 108105345> 16:09:30.942646 IP 192.168.13.7.59206 > 192.168.13.4.25: P 29:70(41) ack 181 win 260 <nop,nop,timestamp 108105346 3042127076> 16:09:30.942822 IP 192.168.13.4.25 > 192.168.13.7.59206: P 181:195(14) ack 70 win 33304 <nop,nop,timestamp 3042127076 108105346> 16:09:30.942887 IP 192.168.13.7.59206 > 192.168.13.4.25: P 70:98(28) ack 195 win 260 <nop,nop,timestamp 108105346 3042127076> 16:09:30.944287 IP 192.168.13.4.25 > 192.168.13.7.59206: P 195:209(14) ack 98 win 33304 <nop,nop,timestamp 3042127078 108105346> 16:09:30.944377 IP 192.168.13.7.59206 > 192.168.13.4.25: P 98:104(6) ack 209 win 260 <nop,nop,timestamp 108105348 3042127078> 16:09:30.944729 IP 192.168.13.4.25 > 192.168.13.7.59206: P 209:246(37) ack 104 win 33304 <nop,nop,timestamp 3042127078 108105348> 16:09:30.945266 IP 192.168.13.7.59206 > 192.168.13.4.25: P 104:128(24) ack 246 win 260 <nop,nop,timestamp 108105348 3042127078> 16:09:30.946009 IP 192.168.13.7.59206 > 192.168.13.4.25: . 128:1576(1448) ack 246 win 260 <nop,nop,timestamp 108105349 3042127078> 16:09:30.946197 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 1576 win 32580 <nop,nop,timestamp 3042127080 108105348> 16:09:30.946214 IP 192.168.13.7.59206 > 192.168.13.4.25: P 1576:2077(501) ack 246 win 260 <nop,nop,timestamp 108105349 3042127080> 16:09:30.947241 IP 192.168.13.7.59206 > 192.168.13.4.25: . 2077:3525(1448) ack 246 win 260 <nop,nop,timestamp 108105350 3042127080> 16:09:30.947366 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 3525 win 32580 <nop,nop,timestamp 3042127081 108105349> 16:09:30.947379 IP 192.168.13.7.59206 > 192.168.13.4.25: P 3525:3857(332) ack 246 win 260 <nop,nop,timestamp 108105351 3042127081> 16:09:30.947932 IP 192.168.13.7.59206 > 192.168.13.4.25: . 3857:5305(1448) ack 246 win 260 <nop,nop,timestamp 108105351 3042127081> 16:09:30.948250 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 5305 win 32580 <nop,nop,timestamp 3042127082 108105351> 16:09:30.948265 IP 192.168.13.7.59206 > 192.168.13.4.25: P 5305:6197(892) ack 246 win 260 <nop,nop,timestamp 108105351 3042127082> 16:09:30.948824 IP 192.168.13.7.59206 > 192.168.13.4.25: . 6197:7645(1448) ack 246 win 260 <nop,nop,timestamp 108105352 3042127082> 16:09:30.948995 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 7645 win 32580 <nop,nop,timestamp 3042127082 108105351> 16:09:30.949008 IP 192.168.13.7.59206 > 192.168.13.4.25: P 7645:8117(472) ack 246 win 260 <nop,nop,timestamp 108105352 3042127082> 16:09:30.949655 IP 192.168.13.7.59206 > 192.168.13.4.25: . 8117:9565(1448) ack 246 win 260 <nop,nop,timestamp 108105353 3042127082> 16:09:30.949973 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 9565 win 32580 <nop,nop,timestamp 3042127083 108105352> 16:09:30.949985 IP 192.168.13.7.59206 > 192.168.13.4.25: P 9565:10448(883) ack 246 win 260 <nop,nop,timestamp 108105353 3042127083> 16:09:30.950469 IP 192.168.13.7.59206 > 192.168.13.4.25: . 10448:11896(1448) ack 246 win 260 <nop,nop,timestamp 108105354 3042127083> 16:09:30.950708 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 11896 win 32580 <nop,nop,timestamp 3042127084 108105353> 16:09:30.950721 IP 192.168.13.7.59206 > 192.168.13.4.25: P 11896:12522(626) ack 246 win 260 <nop,nop,timestamp 108105354 3042127084> 16:09:30.951144 IP 192.168.13.7.59206 > 192.168.13.4.25: . 12522:13970(1448) ack 246 win 260 <nop,nop,timestamp 108105354 3042127084> 16:09:30.951442 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 13970 win 32580 <nop,nop,timestamp 3042127085 108105354> 16:09:30.951455 IP 192.168.13.7.59206 > 192.168.13.4.25: P 13970:14837(867) ack 246 win 260 <nop,nop,timestamp 108105355 3042127085> 16:09:30.951753 IP 192.168.13.7.59206 > 192.168.13.4.25: . 14837:16285(1448) ack 246 win 260 <nop,nop,timestamp 108105355 3042127085> 16:09:30.951882 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 16285 win 32580 <nop,nop,timestamp 3042127085 108105355> 16:09:30.951893 IP 192.168.13.7.59206 > 192.168.13.4.25: P 16285:16672(387) ack 246 win 260 <nop,nop,timestamp 108105355 3042127085> 16:09:30.952396 IP 192.168.13.7.59206 > 192.168.13.4.25: . 16672:18120(1448) ack 246 win 260 <nop,nop,timestamp 108105356 3042127085> 16:09:30.952616 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 18120 win 32580 <nop,nop,timestamp 3042127086 108105355> 16:09:30.952641 IP 192.168.13.7.59206 > 192.168.13.4.25: P 18120:18690(570) ack 246 win 260 <nop,nop,timestamp 108105356 3042127086> 16:09:30.953033 IP 192.168.13.7.59206 > 192.168.13.4.25: . 18690:20138(1448) ack 246 win 260 <nop,nop,timestamp 108105356 3042127086> 16:09:30.953350 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 20138 win 32580 <nop,nop,timestamp 3042127087 108105356> 16:09:30.953364 IP 192.168.13.7.59206 > 192.168.13.4.25: P 20138:21062(924) ack 246 win 260 <nop,nop,timestamp 108105357 3042127087> 16:09:30.953865 IP 192.168.13.7.59206 > 192.168.13.4.25: . 21062:22510(1448) ack 246 win 260 <nop,nop,timestamp 108105357 3042127087> 16:09:30.954084 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 22510 win 32580 <nop,nop,timestamp 3042127087 108105357> 16:09:30.954099 IP 192.168.13.7.59206 > 192.168.13.4.25: P 22510:22779(269) ack 246 win 260 <nop,nop,timestamp 108105357 3042127087> 16:09:30.954703 IP 192.168.13.7.59206 > 192.168.13.4.25: . 22779:24227(1448) ack 246 win 260 <nop,nop,timestamp 108105358 3042127087> 16:09:30.954964 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 24227 win 32580 <nop,nop,timestamp 3042127088 108105357> 16:09:30.954976 IP 192.168.13.7.59206 > 192.168.13.4.25: P 24227:24855(628) ack 246 win 260 <nop,nop,timestamp 108105358 3042127088> 16:09:31.055138 IP 192.168.13.4.25 > 192.168.13.7.59206: . ack 24855 win 33304 <nop,nop,timestamp 3042127189 108105358> 16:09:31.055148 IP 192.168.13.7.59206 > 192.168.13.4.25: P 24855:24862(7) ack 246 win 260 <nop,nop,timestamp 108105458 3042127189> 16:09:31.080437 IP 192.168.13.4.25 > 192.168.13.7.59206: P 246:283(37) ack 24862 win 33304 <nop,nop,timestamp 3042127214 108105458> 16:09:31.080685 IP 192.168.13.7.59206 > 192.168.13.4.25: P 24862:24868(6) ack 283 win 260 <nop,nop,timestamp 108105484 3042127214> 16:09:31.081025 IP 192.168.13.4.25 > 192.168.13.7.59206: P 283:298(15) ack 24868 win 33304 <nop,nop,timestamp 3042127214 108105484> 16:09:31.081085 IP 192.168.13.7.59206 > 192.168.13.4.25: F 24868:24868(0) ack 298 win 260 <nop,nop,timestamp 108105484 3042127214> 16:09:31.081180 IP 192.168.13.4.25 > 192.168.13.7.59206: F 298:298(0) ack 24868 win 33304 <nop,nop,timestamp 3042127215 108105484> 16:09:31.081320 IP 192.168.13.4.25 > 192.168.13.7.59206: F 298:298(0) ack 24869 win 33304 <nop,nop,timestamp 3042127215 108105484> 16:09:31.081335 IP 192.168.13.7.59206 > 192.168.13.4.25: . ack 299 win 260 <nop,nop,timestamp 108105485 3042127215> connection closed and opened again ? 16:10:13.206555 IP 192.168.13.7.60906 > 192.168.13.4.25: S 219272317:219272317(0) win 65535 <mss 1460,nop,wscale 8,sackOK,timestamp 108147619 0> 16:10:13.206789 IP 192.168.13.4.25 > 192.168.13.7.60906: S 1948405606:1948405606(0) ack 219272318 win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 3042169350 108147619,sackOK,eol> 16:10:13.206824 IP 192.168.13.7.60906 > 192.168.13.4.25: . ack 1 win 260 <nop,nop,timestamp 108147620 3042169350> 16:10:13.208261 IP 192.168.13.4.25 > 192.168.13.7.60906: P 1:48(47) ack 1 win 33304 <nop,nop,timestamp 3042169351 108147620> 16:10:13.208347 IP 192.168.13.7.60906 > 192.168.13.4.25: P 1:21(20) ack 48 win 260 <nop,nop,timestamp 108147621 3042169351> 16:10:13.208690 IP 192.168.13.4.25 > 192.168.13.7.60906: P 48:74(26) ack 21 win 33304 <nop,nop,timestamp 3042169352 108147621> 16:10:13.208715 IP 192.168.13.7.60906 > 192.168.13.4.25: P 21:27(6) ack 74 win 260 <nop,nop,timestamp 108147621 3042169352> 16:10:13.208729 IP 192.168.13.7.60906 > 192.168.13.4.25: F 27:27(0) ack 74 win 260 <nop,nop,timestamp 108147621 3042169352> Why the flag is 'F' here ? doesn't seems normal for me :) 16:10:13.208835 IP 192.168.13.4.25 > 192.168.13.7.60906: . ack 28 win 33301 <nop,nop,timestamp 3042169352 108147621> 16:10:13.208986 IP 192.168.13.4.25 > 192.168.13.7.60906: P 74:89(15) ack 28 win 33304 <nop,nop,timestamp 3042169352 108147621> 16:10:13.209069 IP 192.168.13.7.60906 > 192.168.13.4.25: R 219272345:219272345(0) win 0 16:10:13.209074 IP 192.168.13.4.25 > 192.168.13.7.60906: F 89:89(0) ack 28 win 33304 <nop,nop,timestamp 3042169352 108147621> 16:10:13.209079 IP 192.168.13.7.60906 > 192.168.13.4.25: R 219272345:219272345(0) win 0 application hangs at this point, no more packets captured. This is from /var/log/messages: Aug 15 16:10:13 mb7 kernel: TCP: [192.168.13.4]:25 to [192.168.13.7]:60906 tcpflags 0x18<PUSH,ACK>; tcp_do_segment: FIN_WAIT_2: Received data after socket was closed, sending RST and removing tcpcb -- Best Wishes, Stefan Lambrev ICQ# 24134177
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46C30FA6.7060108>