On Friday 16 May 2003 18:23, GoMi wrote: > Basically there is no solution to stop these? Is that what you are saying? > Do other p2p programs produce these short SYN packages, or just KaZaa? I am > studying the traffic in my lan with tcpdump and i get lots of packages like > this coming to my inner interface : > > 19:14:50.866190 XXX.XXX.XXX.XXX.1101 > YYY.YYY.YYY.YYY.80: . ack 14594 win > 64240 (DF) Being XXX my internal users and YYY external public addresses > > What are those? Response to ack packages right? > > I also have lots of > > 19:19:26.676651 YYY.YYY.YYY.YYY.80 > XXX.XXX.XXX.XXX.4078: . > 10220:11680(1460) ack 1 win 17121 (DF) Is it posible that kazaa uses ACK > packages to send data? Because these packages are comming to my lan with > the MTU Erik sended me some shaping tricks : http://www.docum.org/stef.coene/qos/faq/cache/49.html Quote : "ACK packets are usually very small, so putting them into a high-priority class is no problem. However, ACK packets can also cary a payload, and some indeed do so. Especially uploads in Kazaa tend to be all large ACK packets." Stef -- stef.coene@xxxxxxxxx "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net