Date: Thu, 16 Sep 2004 03:56:19 -0000 From: "Florian C. Smeets" <flo@kasimir.com> To: pf4freebsd@freelists.org Subject: [pf4freebsd] Re: nfsd send error 1 probably caused by pf ? Message-ID: <3FB3EBBA.5070405@kasimir.com> In-Reply-To: <20031113163911.GR17343@insomnia.benzedrine.cx> References: <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com> <3FB2B5AB.50601@kasimir.com> <20031113163911.GR17343@insomnia.benzedrine.cx>
next in thread | previous in thread | raw e-mail | index | archive | help
Daniel Hartmeier wrote: > On Wed, Nov 12, 2003 at 11:35:23PM +0100, Florian C. Smeets wrote: >=20 >=20 >>I get a lot of these BAD state messages with debug leve misc: >> >>Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 >>172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879006265 high=3D2879023465=20 >>win=3D16588 modulator=3D0] [lo=3D1139973024 high=3D1139974122 win=3D172= 00=20 >>modulator=3D0] 4:4 A >> seq=3D1139974472 ack=3D2879006265 len=3D1448 ackskew=3D0 pkts=3D40688= 6:392362=20 >>dir=3Din,rev >=20 >=20 > To prove this theory, you'd need a tcpdump -nvvvS of the entire > connection (or at least a couple of packets before the first BAD state > message). The connection doesn't use window scaling, so either the peer > is at fault or pf saw a packet reducing your window size which got lost > before the peer saw it. How regularly does this occur? >=20 I'm going to test this in the weekend. I don't have much time at the mome= nt. If i get the time i'm going to try to reproduce this at work tomorrow. Thanks alot for your help, flo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FB3EBBA.5070405>