Spurious ACKs, ICMP unreachable?

Mikolaj Golub trociny at freebsd.org
Sat May 14 14:52:32 UTC 2011


On Fri, 13 May 2011 14:38:34 -0700 Chuck Swiger wrote:

 CS> On May 13, 2011, at 1:07 PM, Ivan Voras wrote:
 >> I'm seeing an an unusual problem at a remote machine; this machine is
 >> the FreeBSD server, and the client is a probably Windows machine (but I
 >> don't know the details yet). Something happens which causes FreeBSD to
 >> send ACKs to the client, and the client to send ICMP unreachable
 >> messages to the server. It is most likely a configuration error at the
 >> remote site but I have no idea how to verify this.


 CS> Let's look at just one connection:

 CS> 18:56:02.711942 IP server.http > client.4732: Flags [.], ack 2110905191, win 0, length 0
 CS> 18:56:02.713155 IP server.http > client.4732: Flags [.], ack 1, win 65535, length 0

 CS> The packet is FreeBSD webserver sending ACKs with zero window size;
 CS> that's a sign of congestion that the client should not be sending more
 CS> data and instead doing periodic window probes until the local box opens
 CS> the window again.  The next packet on the same connection then ACK's
 CS> something outside of the window with a 64K window size.  That's wrong;
 CS> the other side probably sends an RST and the ICMP error.  If you have TSO
 CS> enabled, try turning it off.

Might be this the thing that jhb@ was fixing in r221346?

-- 
Mikolaj Golub


More information about the freebsd-net mailing list