On Mon, Jul 3, 2017 at 7:12 PM, Sun Paul <paulrbk@xxxxxxxxx> wrote: > also, how to determine it is OOTB packet? can you use systemtap on the host sending abort chunk ? # stap --all-modules -v -e 'probe module("sctp").function("sctp_make_abort").call{print_backtrace();println("");}' So that we can see how the abort chunk is caused. > > On Mon, Jul 3, 2017 at 10:56 AM, Sun Paul <paulrbk@xxxxxxxxx> wrote: >> we found lots of entries when issue netstat command. seems the OS IP >> stack level have issue. anyone faced this before? >> >> sctp 1540 0 192.168.220.115:3868 172.10.116.169:3868 >> LISTEN >> 192.168.220.123 172.10.116.170 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.169:3868 >> LISTEN >> 192.168.220.123 172.10.116.170 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.169:3868 >> LISTEN >> 192.168.220.123 172.10.116.170 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.169:3868 >> LISTEN >> 192.168.220.123 172.10.116.170 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.169:3868 >> LISTEN >> 192.168.220.123 172.10.116.170 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> sctp 1540 0 192.168.220.115:3868 172.10.116.173:3868 >> LISTEN >> 192.168.220.123 172.10.116.174 >> >> On Sun, Jul 2, 2017 at 1:47 AM, Marcelo <marcelo.leitner@xxxxxxxxx> wrote: >>> Means out of the blue below. >>> Your stats are interesting, you have expired cookies and also bad checksum. >>> >>> >>> Em 1 de julho de 2017 14:29:56 BRT, Sun Paul <paulrbk@xxxxxxxxx> escreveu: >>>>OOTB means? >>>> >>>>and below figure is the /proc/net/sctp/snmp, any idea >>>> >>>>$ cat /proc/net/sctp/snmp >>>>SctpCurrEstab 0 >>>>SctpActiveEstabs 26061 >>>>SctpPassiveEstabs 204235 >>>>SctpAborteds 811874 >>>>SctpShutdowns 196524 >>>>SctpOutOfBlues 19104636 >>>>SctpChecksumErrors 3070 >>>>SctpOutCtrlChunks 3515894374 >>>>SctpOutOrderChunks 43687436 >>>>SctpOutUnorderChunks 5244253158 >>>>SctpInCtrlChunks 3820268182 >>>>SctpInOrderChunks 2553760409 >>>>SctpInUnorderChunks 2741444705 >>>>SctpFragUsrMsgs 197031085 >>>>SctpReasmUsrMsgs 207379860 >>>>SctpOutSCTPPacks 6407590023 >>>>SctpInSCTPPacks 6719200223 >>>>SctpT1InitExpireds 18041179 >>>>SctpT1CookieExpireds 365 >>>>SctpT2ShutdownExpireds 486 >>>>SctpT3RtxExpireds 4543012 >>>>SctpT4RtoExpireds 0 >>>>SctpT5ShutdownGuardExpireds 2 >>>>SctpDelaySackExpireds 2595840671 >>>>SctpAutocloseExpireds 0 >>>>SctpT3Retransmits 4527700 >>>>SctpPmtudRetransmits 3341 >>>>SctpFastRetransmits 4155577 >>>>SctpInPktSoftirq 6711421746 >>>>SctpInPktBacklog 7744553 >>>>SctpInPktDiscards 19253619 >>>>SctpInDataChunkDiscards 4248038 >>>> >>>>On Sun, Jul 2, 2017 at 1:11 AM, Marcelo Ricardo Leitner >>>><marcelo.leitner@xxxxxxxxx> wrote: >>>>> Hi, >>>>> >>>>> On Sun, Jul 02, 2017 at 01:02:36AM +0800, Sun Paul wrote: >>>>>> Hi >>>>>> >>>>>> we have a setup that running normal, however, we found that some of >>>>>> the conenctions are not able to establish and we (server) send ABORT >>>>>> right after receiving COOKIE_ECHO. >>>>>> >>>>>> any idea? >>>>> >>>>> Several reasons.. if it's not triggering a duplicate cookie >>>>processing, >>>>> it's being processed on sctp_sf_do_5_1D_ce(). Have a look at it to >>>>have >>>>> a better idea. Two reasons that stands out are somehow the cookie was >>>>> interpreted as an OOTB packet or the tcp-style listening socket got >>>>its >>>>> backlog full. >>>>> >>>>> It can also be due to an out of memory situation, which is not often >>>>the >>>>> case. >>>>> >>>>> OOTB packets are accounted for in netstat -s or /proc/net/sctp/snmp. >>>>> >>>>> Marcelo >>>>> >>> >>> -- >>> Enviado de meu dispositivo Android com K-9 mail. Desculpe-me pela brevidade. > -- > To unsubscribe from this list: send the line "unsubscribe linux-sctp" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe linux-sctp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html