On Fri, Jul 23, 2004 at 01:08:20PM -0700, you [David S. Miller] wrote: > On Fri, 23 Jul 2004 19:59:10 +0300 > Ville Herva <vherva@viasys.com> wrote: > > > And here is a hanging one: > > --8<----------------------------------------------------------------------- > > # tcpdump host plus.kaleva.fi > > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > > listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes > > 19:27:55.165918 IP my-host.56691 > plus.kaleva.fi.http: S 2736589007:2736589007(0) win 5840 <mss 1460,sackOK,timestamp 209957002 0,nop,wscale 0> > > 19:27:55.188250 IP plus.kaleva.fi.http > my-host.56691: S 3450327922:3450327922(0) ack 2736589008 win 65535 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0,nop,nop,sackOK> > > 19:27:55.188344 IP my-host.56691 > plus.kaleva.fi.http: . ack 1 win 5840 <nop,nop,timestamp 209957024 0> > > 19:27:58.107821 IP my-host.56691 > plus.kaleva.fi.http: P 1:8(7) ack 1 win 5840 <nop,nop,timestamp 209959944 0> > > 19:27:58.134478 IP plus.kaleva.fi.http > my-host.56691: FP 2897:2911(14) ack 8 win 65528 <nop,nop,timestamp 14858207 209959944> > > There is something wrong with this trace, this FIN packet should close the > connection, but the sequence numbers are all wrong. > In fact, plus.kaleva.fi sends several FINs at different sequence numbers > throughout this trace, which makes absolutely no sense. Baffling. Is there anything I could do to debug this further? Is the remote server, an intermediate router or my box the most likely suspect? One remote possibility that I haven't completely written off is that my ISP is doing somekind of cunning transparent proxying for http. They do claim this is not the case, but the help desk was of course utterly clueless, so I'm not even sure they had any idea what i was asking. tcptraceroute nor tcpdump give no evidence for anything such, tough (at least not to my untrained eye). - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
