Flooding TCP connection

Atte Peltomaki koston at iki.fi
Tue Mar 22 23:08:50 PST 2005


> :Every once in a while, when application crashes and leaves an open TCP
> :connection, data starts flowing full speed back and forth the boxes.
> :Here's tcpdump output from one occasion where Opera crashed:
> :
> :=06:56:33.123424 IP webserverip.80 > myboxip.1632: . ack 1 win 33580 <nop,nop,timestamp 859 139667162>
> :06:56:33.123461 IP myboxip.1632 > webserverip.80: F 838440838:838440838(0) ack 3219133104 win 65535 <nop,nop,timest
> 
>     Could you send more of the tcpdump so we can see the characteristics of
>     the flooding?

I only pasted two lines becuse that was the only tcpdump output I got.
(Just many many more lines like that).

I can easily reproduce the problem at least by having an open ssh
connection (via F-Secure SSH) and then disabling packet filter. I can
also try OpenSSH if you think it's worth the time. 

Last time this happened yesterday, after the flooding stopped my whole 
box turned numb, all old connections worked but no new ones could be
made.

I also compiled world yesterday to see if it helps. 

-- 
Atte Peltomäki             
http://kameli.org





More information about the Users mailing list