Segment failed SYNCOOKIE?

[Steve Kargl]

On Sat, May 26, 2007 at 10:45:38PM +0300, Abdullah Ibn Hamad Al-Marri wrote:
> On 5/26/07, Steve Kargl <sgk at troutmask.apl.washington.edu> wrote:
> >Anyone have ideas on how to cure
> >
> >May 25 16:20:03 node13 kernel: TCP: [192.168.0.15]:53815 to
> >[192.168.0.13]:50992 tcpflags 0x11<FIN,ACK>; syncache_expand:
> >Segment failed SYNCOOKIE authentication
> >
> >The hardware and kernel on 192.168.0.15 and 192.168.0.13
> >are identical.
> >
> >--
> >Steve
> 
> 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Sat May 26 04:25:29 GMT 2007
> 
> I got the same problem and my sever paniced today.
> 
> TCP: [70.162.96.41]:54686 to [IP removed for security reasons]:59999
> tcpflags 0x18<PUSH,ACK>; syncache_expand: Segment failed SYNCOOKIE
> authentication
> 
> Anyone working on this now?
> 

Fortunately for me, the porblem appears on a cluster that
sits behind a firewall or two, so I can turn syncookie off
via net.inet.tcp.syncookies.

-- 
Steve