Ron Lai wrote:
The log I got is listed below and the corresponding pcap file is attached. Nov 1 21:14:54 ron kernel: ftp: Conntrackinfo = 2 Nov 1 21:14:54 ron kernel: ftp: Conntrackinfo = 2 Nov 1 21:14:54 ron kernel: ftp: dataoff(60) >= skblen(60) Nov 1 21:14:54 ron kernel: ftp: dataoff(60) >= skblen(60) Nov 1 21:14:54 ron kernel: ftp: dataoff(52) >= skblen(52) Nov 1 21:14:54 ron kernel: ftp: dataoff(52) >= skblen(52)
This very much looks like your packets hit the helper twice, which would also explain the double sequence number adjustment. You didn't answer my question before, are you using any patches? - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html