On Sat, Dec 30, 2017 at 11:41 AM, Duncan Roe <duncan_roe@xxxxxxxxxxxxxxx> wrote:
> Hi,
>
> It looks like there is a low-level networking problem or maybe misconfigured
> firewall in the netfilter git server netfilter.us.es.git.
>
Yes, facing same problem.
> The server responds immediately to the incoming SYN with one of its own, but
> ignores the return ACK segment, eventually retransmitting the SYN. After abot
> 70sec it issues a REJ in response to a PUSH data segment.
>
> tcpdump follows: can someone investigate and fix please,
>
> Cheers ... Duncan.
>
>> 12:02:53.198695 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [S], seq 3125904389, win 29200, options [mss 1460,sackOK,TS val 1210945067 ecr 0,nop,wscale 7], length 0
>> E..<K.@.@...
>> .........$..Q........r..,.........
>> H-.+........
>> 12:02:53.555187 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32309387 ecr 1210945067,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q p`.........
>> ....H-.+....
>> 12:02:53.555248 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210945424 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q....ip...........
>> H-......
>> 12:02:53.555324 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210945424 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip...........
>> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:02:54.342969 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210946212 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip..... .....
>> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:02:54.947635 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32309735 ecr 1210946212,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q j..........
>> ....H-......
>> 12:02:54.947673 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210946816 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q.;..ip.....^.....
>> H-......
>> 12:02:55.430971 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210947300 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip...........
>> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:02:56.946578 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32310235 ecr 1210947300,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q dW.........
>> ....H-......
>> 12:02:56.946616 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210948815 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q.;..ip...........
>> H-......
>> 12:02:57.606968 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210949476 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip.....I.....
>> H-.d....0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:03:01.347515 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32311335 ecr 1210949476,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q W..........
>> ...'H-.d....
>> 12:03:01.347558 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210953216 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q.;..ip.....].....
>> H-......
>> 12:03:02.022969 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210953892 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip..... .....
>> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:03:09.346542 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32313335 ecr 1210953892,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q >{.........
>> ....H-......
>> 12:03:09.346585 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210961215 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q.;..ip...........
>> H-.?....
>> 12:03:10.726968 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210962596 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip..... .....
>> H-......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:03:25.346870 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [S.], seq 3619907951, ack 3125904390, win 28960, options [mss 1460,sackOK,TS val 32317335 ecr 1210962596,nop,wscale 7], length 0
>> E..<..@.'.$>....
>> ...$.....io.Q....q ...........
>> ....H-......
>> 12:03:25.346916 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [.], ack 1, win 229, options [nop,nop,TS val 1210977215 ecr 32309387], length 0
>> E..4K.@.@...
>> .........$..Q.;..ip...........
>> H.......
>> 12:03:28.134970 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1210980004 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip....D .....
>> H.......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:04:02.950974 IP dimstar.local.net.47562 > netfilter.us.es.git: Flags [P.], seq 1:54, ack 1, win 229, options [nop,nop,TS val 1211014820 ecr 32309387], length 53
>> E..iK.@.@...
>> .........$..Q....ip...........
>> H.......0035git-upload-pack /nftables.host=git.netfilter.org.
>> 12:04:03.318236 IP netfilter.us.es.git > dimstar.local.net.47562: Flags [R], seq 3619907952, win 0, length 0
>> E..(..@.'.*.....
>> ...$.....ip....P...`.........
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
