Re: 2.4.16: TCP shutdown generating infinite ACK storm

[Mika Liljeberg]

Jeremy Fitzhardinge wrote:
> I'm looking at my box and a server at Tom's Hardware pounding each other
> with packets.  It looks like Linux has got confused about sequence
> numbers (or maybe the other end is confused?).

Yes, it does look like a sequence synchronization problem.

> Naturally, this looks bad.  After a while it seemed to stop of its own
> accord, I presume when something timed out of LAST_ACK.  While it was
> happening, there were two sockets ixising to ad.tomshardware.com:
> 
> tcp        1      1 ixodes.goop.org:33674   ad.tomshardware.co:http LAST_ACK
> tcp        1      1 ixodes.goop.org:33708   ad.tomshardware.co:http LAST_ACK
> 
> I'm using 2.4.16 with no particularly special patches.  The gateway
> machine is another 2.4.16 box doing NAT with ipchains emulation.
> 
> Any other info needed?

If you can repeat this, you please run tcpdump with the -vv option in
order to get it to display the sequence numbers on ack packets as well.
It would also be good to see the last few packets of the connection (at
least the FIN packets).

BR,

	MikaL