Re: Aren't these connections ESTABILISHED? (2nd take)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2 Oct 2005, Jozsef Kadlecsik wrote:

If a FIN receives which does not belong to any existing connection in
the conntrack table, which state should we assign to the "new" connection
"established" by the FIN? Was it the first FIN (half-closed session) or
the second FIN from the other direction?

If you assume it's the second then it's a good approximation, and sufficient to push the TCP on the receiving host into a state from which there is a guaranteed timeout as it's then only waiting on itself to finish what it is doing.

If the FIN is dropped then communication may stall indefinitely unless the protocol is using an application level timeout or TCP keepalive.

I dunno how a lone RST could signal to pick up a connection.

It should be the same as a RST in an existing connection, no more, not much less. It has some value to the receiving host telling it to shut down a matching TCP. But this is considerably less important than the FIN as the RST is very unreliable anyway and protocols using initiated RST (not in direct response to a received packet) ashould have appropriate application level timeouts on their connections.

Regards
Henrik


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux