TCP/IP Gurus

[Iakwbos Triantafilloy]

Panayotis Tsiamis wrote:

> Iakwbos Triantafilloy wrote:
>
>> Panayotis Tsiamis wrote:
>>
>>> Exo apo ena sigekrimeno host to exeis minima
>>> sta logfiles mou:
>>>
>>> TCP: Treason uncloaked! Peer XXX.XXX.XXX.XXX:10805/XXX shrinks 
>>> window 2207195809:2207197189. Repaired.
>>> .
>>> .
>>> .
>>> TCP: Treason uncloaked! Peer XXX.XXX.XXX.XXX:10805/XXX shrinks 
>>> window 2207195809:2207197189. Repaired.
>>>
>>>
>>> Pistebo oti ofilete se kapio kako configuration firewall.
>>> (Pithanos den afinei ta ICMP packeta na perasoun)
>>>
>>> Exei sinantisei kapios idia katastasi kai an nai pia itan i aitia
>>> kai pos ti diorthose.
>>>
>>> PS: Don't answer with copy&paste parts from Stevens book
>>>
>>>
>>
>> Kai btw, eriksa mia matia gia workarounds (paroti to prob einai sto 
>> remote end). By default paizei ena orio 2 leptwn gia na ginei 
>> retransmit kati se flow control condition. Apo kei kai pera mporeis 
>> na to anebaseis ayto ki allo (an kai den exei nohma, 2 lepta einai 
>> POLYS xronos se pc-time/blepe dog-years).
>>
>> Ap oti koitaksa o kernoulas exei ena default cap pou orizetai sto 
>> TCP_RTO_MAX. Allakse to se kati megalytero, px 10 lepta. Tha proteina 
>> pantws na paikseis me kapoio packet sniffer opws to tcpdump gia na 
>> deis ti paizei pio kathara kai meta prateis analogws.
>>
>>
>> I.T.
>>
>>
> Distixos den exo to xrono na katso na asxolitho me network debugging :(
>
> (giati fisika oloi stin ellada de kanoun debugging epeidi plirononte,
> epeidi tin "briskoune" to kanoun :p)
>
> Pantos pistebeis pos prokeite gia problima kakou configuration sto OS 
> pou stelnei ta paketa
> i se kapio router/firewall pou yparxei endiamesa?
>
> Kai btw, thanks for your help mate ;-]
>
>

Mporei na einai polla pragmata... Gi ayto sou eipa na deis me tcpdump ti 
paizei... Mporei na einai problhmatiko stack sto remote mhxanhma , 
problhma me ton kernel (bale latest kernel:/ [TCP]: Clear stale 
pred_flags when snd_wnd changes. This avoids the "Treason uncloaked" 
message. <- apo kapoio x86_64 suse security patch), akoma kai DoS.

Einai arketa pragmata pou mporei na ftaine kai an den kaneis network 
debugging tha einai arketa duskolo na breis ti akribws paizei. An einai 
sto diko sou side (blepe suse-kernel) h' sto remote kai den exw idea gia 
ta specs twn mhxanhmatwn, oute kan ti distro trexoun gia na pw oti estw 
tha kanw mia ypothesh...

Kalh tyxh kai kalo debugging :->


I.T.
/