On Fri, 23 Jul 2004, Ville Herva wrote: > 19:27:45.384678 IP my-host.56690 > plus.kaleva.fi.http: S 2740242788:2740242788(0) win 5840 <mss 1460,sackOK,timestamp 209947219 0,nop,wscale 0> > 19:27:45.406106 IP plus.kaleva.fi.http > my-host.56690: S 3447607723:3447607723(0) ack 2740242789 win 65535 <mss 1440,nop,wscale 0,nop,nop,timestamp 0 0,nop,nop,sackOK> > 19:27:45.406209 IP my-host.56690 > plus.kaleva.fi.http: . ack 1 win 5840 <nop,nop,timestamp 209947241 0> > 19:27:49.857104 IP my-host.56690 > plus.kaleva.fi.http: P 1:8(7) ack 1 win 5840 <nop,nop,timestamp 209951692 0> > 19:27:49.889166 IP plus.kaleva.fi.http > my-host.56690: . 1:1429(1428) ack 8 win 65528 <nop,nop,timestamp 14858124 209951692> > 19:27:49.889331 IP my-host.56690 > plus.kaleva.fi.http: . ack 1429 win 8568 <nop,nop,timestamp 209951724 14858124> > And here is a hanging one: > --8<----------------------------------------------------------------------- > # tcpdump host plus.kaleva.fi > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes > 19:27:55.165918 IP my-host.56691 > plus.kaleva.fi.http: S 2736589007:2736589007(0) win 5840 <mss 1460,sackOK,timestamp 209957002 0,nop,wscale 0> > 19:27:55.188250 IP plus.kaleva.fi.http > my-host.56691: S 3450327922:3450327922(0) ack 2736589008 win 65535 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0,nop,nop,sackOK> > 19:27:55.188344 IP my-host.56691 > plus.kaleva.fi.http: . ack 1 win 5840 <nop,nop,timestamp 209957024 0> > 19:27:58.107821 IP my-host.56691 > plus.kaleva.fi.http: P 1:8(7) ack 1 win 5840 <nop,nop,timestamp 209959944 0> > 19:27:58.134478 IP plus.kaleva.fi.http > my-host.56691: FP 2897:2911(14) ack 8 win 65528 <nop,nop,timestamp 14858207 209959944> > 19:27:58.134589 IP my-host.56691 > plus.kaleva.fi.http: . ack 1 win 5840 <nop,nop,timestamp 209959971 0,nop,nop,sack sack 1 {2897:2912} > > 19:27:58.417788 IP my-host.56691 > plus.kaleva.fi.http: P 8:10(2) ack 1 win 5840 <nop,nop,timestamp 209960254 0,nop,nop,sack sack 1 {2897:2912} > May be a MTU blackhole in the path from the server to you. It looks like there may be two loadbalaced servers involved here with different MSS settings. Try setting a small MSS to force the server to send you smaller packets than default. If this works then the problem is quite likely MTU related. ip ro add plus.kaleva.fi via your.deafult.gateway advmss 500 Regards Henrik - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html