netdev - Re: Debugging TCP: Treason Uncloaked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 8 May 2008 11:01:25 -0400
From:	"John Heffner" <johnwheffner@...il.com>
To:	"Chris Bredesen" <cbredesen@...hat.com>
Cc:	netdev@...r.kernel.org
Subject: Re: Debugging TCP: Treason Uncloaked

On Wed, May 7, 2008 at 10:29 PM, Chris Bredesen <cbredesen@...hat.com> wrote:
> Hello,
>
>  As per below thread, I'm forwarding to this list/alias.  tcpdump output
>  is attached to the forum post.

Full binary tcpdumps (including the SYN packets) are more useful.

>From the brief snippet you have, we can't see where the announced
window was reneged, but it's 192.168.1.130 doing it, not the nas box.
You're also getting DSACKs from the nas box, which is also a bit
strange.

Another thing to try is disabling TSO, though I can't think why that
might be causing a problem here.

  -John
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html