Flooding TCP connection
Atte Peltomaki
koston at iki.fi
Tue Mar 22 23:08:50 PST 2005
> :Every once in a while, when application crashes and leaves an open TCP
> :connection, data starts flowing full speed back and forth the boxes.
> :Here's tcpdump output from one occasion where Opera crashed:
> :
> :=06:56:33.123424 IP webserverip.80 > myboxip.1632: . ack 1 win 33580 <nop,nop,timestamp 859 139667162>
> :06:56:33.123461 IP myboxip.1632 > webserverip.80: F 838440838:838440838(0) ack 3219133104 win 65535 <nop,nop,timest
>
> Could you send more of the tcpdump so we can see the characteristics of
> the flooding?
I only pasted two lines becuse that was the only tcpdump output I got.
(Just many many more lines like that).
I can easily reproduce the problem at least by having an open ssh
connection (via F-Secure SSH) and then disabling packet filter. I can
also try OpenSSH if you think it's worth the time.
Last time this happened yesterday, after the flooding stopped my whole
box turned numb, all old connections worked but no new ones could be
made.
I also compiled world yesterday to see if it helps.
--
Atte Peltomäki
http://kameli.org
More information about the Users
mailing list