Hi,
It looks like there is a low-level networking problem or maybe misconfigured
firewall in the netfilter git server netfilter.us.es.git.
The server responds immediately to the incoming SYN with one of its own, but
ignores the return ACK segment, eventually retransmitting the SYN. After abot
70sec it issues a REJ in response to a PUSH data segment.
tcpdump follows: can someone investigate and fix please,
Cheers ... Duncan.
> 12:02:53.198695 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [S], seq 3125904389, win 29200, options [mss 1460,sackOK,TS val 1210945067 ecr 0,nop,wscale 7], length 0
> E..<K.@.@...
> .........$..Q........r..,.........
> H-.+........
> 12:02:53.555187 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32309387 ecr 1210945067,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q p`.........
> ....H-.+....
> 12:02:53.555248 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210945424 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q....ip...........
> H-......
> 12:02:53.555324 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210945424 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip...........
> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:02:54.342969 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210946212 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip..... .....
> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:02:54.947635 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32309735 ecr 1210946212,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q j..........
> ....H-......
> 12:02:54.947673 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210946816 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q.;..ip.....^.....
> H-......
> 12:02:55.430971 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210947300 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip...........
> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:02:56.946578 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32310235 ecr 1210947300,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q dW.........
> ....H-......
> 12:02:56.946616 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210948815 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q.;..ip...........
> H-......
> 12:02:57.606968 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210949476 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip.....I.....
> H-.d....0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:03:01.347515 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32311335 ecr 1210949476,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q W..........
> ...'H-.d....
> 12:03:01.347558 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210953216 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q.;..ip.....].....
> H-......
> 12:03:02.022969 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210953892 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip..... .....
> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:03:09.346542 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32313335 ecr 1210953892,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q >{.........
> ....H-......
> 12:03:09.346585 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210961215 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q.;..ip...........
> H-.?....
> 12:03:10.726968 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210962596 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip..... .....
> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:03:25.346870 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32317335 ecr 1210962596,nop,wscale 7], length 0
> E..<..@.'.$>....
> ...$.....io.Q....q ...........
> ....H-......
> 12:03:25.346916 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210977215 ecr 32309387], length 0
> E..4K.@.@...
> .........$..Q.;..ip...........
> H.......
> 12:03:28.134970 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210980004 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip....D .....
> H.......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:04:02.950974 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1211014820 ecr 32309387], length 53
> E..iK.@.@...
> .........$..Q....ip...........
> H.......0035git-upload-pack /nftables.host=git.netfilter.org.
> 12:04:03.318236 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [R], seq 3619907952, win 0, length 0
> E..(..@.'.*.....
> ...$.....ip....P...`.........
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
