Can't create TCP connections to certain IP addresses

Anish Mistry mistry.7 at osu.edu
Mon Aug 20 08:18:13 PDT 2007


On Monday 20 August 2007, David Malone wrote:
> On Sun, Aug 19, 2007 at 05:51:14PM -0400, Anish Mistry wrote:
> > I'm not sure how to do that with the version of m0nowall that the
> > router is running.  But I can exhibit this behavior on the local
> > LAN without going through the router.
>
> In that case, run a tcpdump on both ends and see if the SYN packet
> is arriving at the far end. You might also want to try using
> "tcpdump -s0 -v" to check the checksums on the packets (though they
> can't always be trusted on the packet's sender if the network card
> supports checksum offloading).
>
> 	David.

There doesn't seem to be checksum offloading on the sender ath0
sender: tcpdump -s0 -v 
http://am-productions.biz/debug/littleguy.tcpdump.txt

Far end: tcpdump -s0 -v host 192.168.1.188
http://am-productions.biz/debug/bigguy.tcpdump.txt


-- 
Anish Mistry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20070820/86d553f0/attachment.pgp


More information about the freebsd-current mailing list