nat / rdr timeouts?

Stephane Raimbault segr at hotmail.com
Sun Mar 6 06:08:32 GMT 2005


Thanks for the response... my debug output is below.

>From: Daniel Hartmeier <daniel at benzedrine.cx>
>To: Stephane Raimbault <segr at hotmail.com>
>CC: freebsd-pf at freebsd.org
>Subject: Re: nat / rdr timeouts?
>Date: Sat, 5 Mar 2005 23:20:00 +0100
>
>On Sat, Mar 05, 2005 at 02:57:56PM -0700, Stephane Raimbault wrote:
>
> > I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same
> > results.  Do I need to recompile any other parts of the system?
>
>No, that's it.
>
> > Do we believe I've stumbled onto a bug of pf... or is this some sort of
> > anti-DoS feature?
>
>The default limit on number of states is 10,000. If further packets try
>to create state, they are dropped. But it doesn't look like you're
>hitting that.
>
>Enable debug loggin (pfctl -xm), reproduce the problem, then check
>/var/log/messages for anything from pf.
>

Mar  5 23:17:56 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:17:56 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:17:59 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:17:59 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:18:02 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:18:02 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:18:05 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:18:05 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:18:09 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:18:09 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:18:12 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:18:12 lb1-dev kernel: pf: State failure on: 1       | 5
Mar  5 23:18:18 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
dir=in,fwd
Mar  5 23:18:18 lb1-dev kernel: pf: State failure on: 1       | 5



>Also quote pfctl -vvss output after the problem, as well as pfctl -si,
>please.
>

# pfctl -vvss
No ALTQ support in kernel
ALTQ related functions disabled
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2561       
FIN_WAIT_2:FIN_WAIT_2
   [32585757 + 57920] wscale 0  [4030666851 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a29420000033f creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3073       
FIN_WAIT_2:FIN_WAIT_2
   [280614368 + 57920] wscale 0  [871170019 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000368 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1546       
FIN_WAIT_2:FIN_WAIT_2
   [318290820 + 57920] wscale 0  [3755105029 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000349 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3347       
FIN_WAIT_2:FIN_WAIT_2
   [1140076597 + 57920] wscale 0  [4121153694 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031b creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2836       
FIN_WAIT_2:FIN_WAIT_2
   [2909277378 + 57920] wscale 0  [448910790 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000370 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2327       
FIN_WAIT_2:FIN_WAIT_2
   [2987561263 + 57920] wscale 0  [4146806117 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000318 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2329       
FIN_WAIT_2:FIN_WAIT_2
   [1833281301 + 57920] wscale 0  [1053857949 + 57920] wscale 0
   age 00:00:59, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000327 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1818       
FIN_WAIT_2:FIN_WAIT_2
   [2636697734 + 57920] wscale 0  [2763808572 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000353 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4380       
FIN_WAIT_2:FIN_WAIT_2
   [1563439928 + 57920] wscale 0  [2156220237 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000375 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3613       
FIN_WAIT_2:FIN_WAIT_2
   [4269333757 + 57920] wscale 0  [28302277 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000325 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2334       
FIN_WAIT_2:FIN_WAIT_2
   [4236319117 + 57920] wscale 0  [756984446 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000376 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1570       
FIN_WAIT_2:FIN_WAIT_2
   [1467784327 + 57920] wscale 0  [1805572515 + 57920] wscale 0
   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000389 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2854       
FIN_WAIT_2:FIN_WAIT_2
   [1264223110 + 57920] wscale 0  [3114805151 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000380 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2599       
FIN_WAIT_2:FIN_WAIT_2
   [2493007175 + 57920] wscale 0  [4071674965 + 57920] wscale 0
   age 00:00:58, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a29420000033b creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4647       
FIN_WAIT_2:FIN_WAIT_2
   [1519840616 + 57920] wscale 0  [1155588281 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000351 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2600       
FIN_WAIT_2:FIN_WAIT_2
   [3829938788 + 57920] wscale 0  [2288730060 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000346 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1323       
FIN_WAIT_2:FIN_WAIT_2
   [3299837026 + 57920] wscale 0  [571661919 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037f creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4139       
FIN_WAIT_2:FIN_WAIT_2
   [2936258233 + 57920] wscale 0  [3552485098 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1069       
FIN_WAIT_2:FIN_WAIT_2
   [3429734760 + 57920] wscale 0  [1047686037 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000350 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1582       
FIN_WAIT_2:FIN_WAIT_2
   [2239408408 + 57920] wscale 0  [792523365 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000356 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1839       
FIN_WAIT_2:FIN_WAIT_2
   [1084975327 + 57920] wscale 0  [3468075791 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035c creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4402       
FIN_WAIT_2:FIN_WAIT_2
   [1734033910 + 57920] wscale 0  [4212345601 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a29420000033c creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3636       
FIN_WAIT_2:FIN_WAIT_2
   [1247559674 + 57920] wscale 0  [3855641134 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036c creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4917       
FIN_WAIT_2:FIN_WAIT_2
   [2579269706 + 57920] wscale 0  [2765039414 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a294200000340 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1334       
FIN_WAIT_2:FIN_WAIT_2
   [1322299975 + 57920] wscale 0  [4143165048 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000352 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1593       
FIN_WAIT_2:FIN_WAIT_2
   [3145580381 + 57920] wscale 0  [1476283631 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000345 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2361       
TIME_WAIT:TIME_WAIT
   [1651992099 + 57344] wscale 0  [1675199900 + 57345] wscale 0
   age 00:00:53, expires in 00:00:37, 2:1 pkts, 100:60 bytes
   id: 422a294200000377 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3132       
FIN_WAIT_2:FIN_WAIT_2
   [54760795 + 57920] wscale 0  [685586651 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3388       
FIN_WAIT_2:FIN_WAIT_2
   [1740195130 + 57920] wscale 0  [2837513788 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000330 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4668       
FIN_WAIT_2:FIN_WAIT_2
   [4153305444 + 57920] wscale 0  [3657625607 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000362 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2110       
FIN_WAIT_2:FIN_WAIT_2
   [1680438376 + 57920] wscale 0  [4124389714 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032b creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4927       
FIN_WAIT_2:FIN_WAIT_2
   [3926918789 + 57920] wscale 0  [1578868844 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032f creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2369       
FIN_WAIT_2:FIN_WAIT_2
   [3264887916 + 57920] wscale 0  [1040383065 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000373 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3138       
FIN_WAIT_2:FIN_WAIT_2
   [3668537022 + 57920] wscale 0  [4070704551 + 57920] wscale 0
   age 00:00:51, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000384 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4677       
FIN_WAIT_2:FIN_WAIT_2
   [4255514426 + 57920] wscale 0  [2108554394 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031e creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1351       
FIN_WAIT_2:FIN_WAIT_2
   [650459315 + 57920] wscale 0  [3007417138 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035d creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4935       
FIN_WAIT_2:FIN_WAIT_2
   [2640203207 + 57920] wscale 0  [1946606900 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1864       
FIN_WAIT_2:FIN_WAIT_2
   [302555830 + 57920] wscale 0  [4259092904 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4936       
FIN_WAIT_2:FIN_WAIT_2
   [3747285884 + 57920] wscale 0  [1707501039 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000364 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4426       
FIN_WAIT_2:FIN_WAIT_2
   [4052825702 + 57920] wscale 0  [1998932217 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4429       
FIN_WAIT_2:FIN_WAIT_2
   [2963041429 + 57920] wscale 0  [2854499682 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000328 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4941       
FIN_WAIT_2:FIN_WAIT_2
   [363310172 + 57920] wscale 0  [1840047747 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000331 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1871       
FIN_WAIT_2:FIN_WAIT_2
   [1551203117 + 57920] wscale 0  [1422169461 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000329 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3152       
FIN_WAIT_2:FIN_WAIT_2
   [1387806479 + 57920] wscale 0  [1346138440 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000320 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4944       
FIN_WAIT_2:FIN_WAIT_2
   [2112290315 + 57920] wscale 0  [3096897628 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037e creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3921       
FIN_WAIT_2:FIN_WAIT_2
   [2276016873 + 57920] wscale 0  [2659410744 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000333 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4692       
FIN_WAIT_2:FIN_WAIT_2
   [4210818300 + 57920] wscale 0  [3178408136 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000319 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4696       
FIN_WAIT_2:FIN_WAIT_2
   [3697003529 + 57920] wscale 0  [1024494100 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000336 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1116       
FIN_WAIT_2:FIN_WAIT_2
   [2568047902 + 57920] wscale 0  [2313094524 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000383 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1372       
FIN_WAIT_2:FIN_WAIT_2
   [2263179419 + 57920] wscale 0  [665532303 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035b creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1119       
FIN_WAIT_2:FIN_WAIT_2
   [3415385225 + 57920] wscale 0  [1370230622 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000382 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3938       
FIN_WAIT_2:FIN_WAIT_2
   [3603803766 + 57920] wscale 0  [276202704 + 57920] wscale 0
   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000386 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4456       
FIN_WAIT_2:FIN_WAIT_2
   [48494854 + 57920] wscale 0  [1301768752 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032e creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2153       
FIN_WAIT_2:FIN_WAIT_2
   [2753680443 + 57920] wscale 0  [557071720 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031f creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4714       
FIN_WAIT_2:FIN_WAIT_2
   [1504808638 + 57920] wscale 0  [2927860233 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000033a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3693       
FIN_WAIT_2:FIN_WAIT_2
   [416273073 + 57920] wscale 0  [4216442984 + 57920] wscale 0
   age 00:01:00, expires in 00:00:30, 5:4 pkts, 363:508 bytes
   id: 422a294200000312 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2159       
FIN_WAIT_2:FIN_WAIT_2
   [617626453 + 57920] wscale 0  [3344368062 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000321 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3951       
FIN_WAIT_2:FIN_WAIT_2
   [2792267335 + 57920] wscale 0  [997036292 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000379 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2673       
FIN_WAIT_2:FIN_WAIT_2
   [4169187362 + 57920] wscale 0  [2600215828 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000332 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3698       
FIN_WAIT_2:FIN_WAIT_2
   [4173377263 + 57920] wscale 0  [113027635 + 57920] wscale 0
   age 00:00:55, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000355 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2169       
FIN_WAIT_2:FIN_WAIT_2
   [3490211889 + 57920] wscale 0  [2950876502 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037c creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2937       
FIN_WAIT_2:FIN_WAIT_2
   [978963795 + 57920] wscale 0  [1899890588 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000354 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4473       
FIN_WAIT_2:FIN_WAIT_2
   [20706720 + 57920] wscale 0  [308909836 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000315 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3706       
FIN_WAIT_2:FIN_WAIT_2
   [1571667015 + 57920] wscale 0  [3670251619 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000381 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4732       
FIN_WAIT_2:FIN_WAIT_2
   [558353217 + 57920] wscale 0  [1843229679 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000339 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1150       
FIN_WAIT_2:FIN_WAIT_2
   [69371452 + 57920] wscale 0  [2527043649 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034e creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4738       
FIN_WAIT_2:FIN_WAIT_2
   [3004764914 + 57920] wscale 0  [3140248529 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035f creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1155       
FIN_WAIT_2:FIN_WAIT_2
   [1742408037 + 57920] wscale 0  [217529573 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000359 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4996       
FIN_WAIT_2:FIN_WAIT_2
   [3353863411 + 57920] wscale 0  [2037795993 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a29420000033d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2438       
FIN_WAIT_2:FIN_WAIT_2
   [2363515767 + 57920] wscale 0  [940185069 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2440       
FIN_WAIT_2:FIN_WAIT_2
   [1512264113 + 57920] wscale 0  [1583872006 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000326 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3977       
FIN_WAIT_2:FIN_WAIT_2
   [3375214689 + 57920] wscale 0  [3340380428 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000338 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2442       
FIN_WAIT_2:FIN_WAIT_2
   [366541085 + 57920] wscale 0  [4229618380 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000365 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2955       
FIN_WAIT_2:FIN_WAIT_2
   [3023032248 + 57920] wscale 0  [2714578033 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037b creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1676       
FIN_WAIT_2:FIN_WAIT_2
   [2143584703 + 57920] wscale 0  [2632152330 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000334 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2957       
FIN_WAIT_2:FIN_WAIT_2
   [3376655763 + 57920] wscale 0  [1962882777 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2959       
FIN_WAIT_2:FIN_WAIT_2
   [2381496694 + 57920] wscale 0  [3907940618 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036e creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2193       
FIN_WAIT_2:FIN_WAIT_2
   [1147009346 + 57920] wscale 0  [652578834 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031c creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1173       
FIN_WAIT_2:FIN_WAIT_2
   [3847048096 + 57920] wscale 0  [4202192232 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000367 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2966       
FIN_WAIT_2:FIN_WAIT_2
   [1704883050 + 57920] wscale 0  [397640671 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034b creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1176       
FIN_WAIT_2:FIN_WAIT_2
   [2908611795 + 57920] wscale 0  [1143955128 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034f creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3225       
TIME_WAIT:TIME_WAIT
   [4053421973 + 57344] wscale 0  [1116197573 + 57345] wscale 0
   age 00:00:57, expires in 00:00:33, 2:1 pkts, 100:60 bytes
   id: 422a294200000344 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3227       
FIN_WAIT_2:FIN_WAIT_2
   [3697384915 + 57920] wscale 0  [4194776544 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000323 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4764       
FIN_WAIT_2:FIN_WAIT_2
   [3426015243 + 57920] wscale 0  [3468954857 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a29420000031a creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2721       
FIN_WAIT_2:FIN_WAIT_2
   [3210917859 + 57920] wscale 0  [501355691 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a29420000035e creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2214       
FIN_WAIT_2:FIN_WAIT_2
   [2024368372 + 57920] wscale 0  [1315702046 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2983       
FIN_WAIT_2:FIN_WAIT_2
   [3207150264 + 57920] wscale 0  [2168442372 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a294200000342 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4263       
FIN_WAIT_2:FIN_WAIT_2
   [46597085 + 57920] wscale 0  [4061701497 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a29420000032c creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2984       
FIN_WAIT_2:FIN_WAIT_2
   [785309605 + 57920] wscale 0  [178732332 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000335 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4265       
FIN_WAIT_2:FIN_WAIT_2
   [1077034523 + 57920] wscale 0  [508685133 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000347 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2474       
FIN_WAIT_2:FIN_WAIT_2
   [3579823839 + 57920] wscale 0  [3186549033 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000317 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3501       
FIN_WAIT_2:FIN_WAIT_2
   [830389565 + 57920] wscale 0  [3726843152 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000366 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4785       
FIN_WAIT_2:FIN_WAIT_2
   [2419913039 + 57920] wscale 0  [2289781021 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a294200000348 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3511       
FIN_WAIT_2:FIN_WAIT_2
   [2249296099 + 57920] wscale 0  [2932871839 + 57920] wscale 0
   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000385 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4794       
FIN_WAIT_2:FIN_WAIT_2
   [3411371868 + 57920] wscale 0  [2783458838 + 57920] wscale 0
   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000387 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4539       
FIN_WAIT_2:FIN_WAIT_2
   [1104604839 + 57920] wscale 0  [2842567409 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a29420000033e creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3519       
FIN_WAIT_2:FIN_WAIT_2
   [3740703471 + 57920] wscale 0  [87932817 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000374 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3521       
FIN_WAIT_2:FIN_WAIT_2
   [2968103458 + 57920] wscale 0  [3601469586 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000316 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2249       
FIN_WAIT_2:FIN_WAIT_2
   [482606504 + 57920] wscale 0  [2208108060 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000372 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1994       
FIN_WAIT_2:FIN_WAIT_2
   [39371535 + 57920] wscale 0  [3193833702 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000314 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4818       
FIN_WAIT_2:FIN_WAIT_2
   [1810505629 + 57920] wscale 0  [2489348362 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000371 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1238       
FIN_WAIT_2:FIN_WAIT_2
   [1759844756 + 57920] wscale 0  [1414167188 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a294200000378 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2262       
FIN_WAIT_2:FIN_WAIT_2
   [837001507 + 57920] wscale 0  [3660905760 + 57920] wscale 0
   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
   id: 422a29420000037d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3030       
FIN_WAIT_2:FIN_WAIT_2
   [2939379438 + 57920] wscale 0  [2989656088 + 57920] wscale 0
   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
   id: 422a294200000388 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4566       
FIN_WAIT_2:FIN_WAIT_2
   [36874042 + 57920] wscale 0  [1489690186 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036d creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3033       
FIN_WAIT_2:FIN_WAIT_2
   [894623290 + 57920] wscale 0  [1705678299 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000324 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4058       
FIN_WAIT_2:FIN_WAIT_2
   [3593573975 + 57920] wscale 0  [4218672704 + 57920] wscale 0
   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000322 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1499       
FIN_WAIT_2:FIN_WAIT_2
   [3353910087 + 57920] wscale 0  [2313641214 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000361 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1244       
FIN_WAIT_2:FIN_WAIT_2
   [2144658656 + 57920] wscale 0  [3510611502 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000360 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3551       
FIN_WAIT_2:FIN_WAIT_2
   [3266650438 + 57920] wscale 0  [1463919518 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036b creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4064       
FIN_WAIT_2:FIN_WAIT_2
   [480151856 + 57920] wscale 0  [111602781 + 57920] wscale 0
   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
   id: 422a29420000034c creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3041       
FIN_WAIT_2:FIN_WAIT_2
   [3790883218 + 57920] wscale 0  [1635610553 + 57920] wscale 0
   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
   id: 422a294200000337 creatorid: 0f363004
self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2786       
FIN_WAIT_2:FIN_WAIT_2
   [1503037157 + 57920] wscale 0  [2999158633 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000358 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4837       
FIN_WAIT_2:FIN_WAIT_2
   [3904040791 + 57920] wscale 0  [1708743304 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a294200000343 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3561       
FIN_WAIT_2:FIN_WAIT_2
   [760186488 + 57920] wscale 0  [3036802596 + 57920] wscale 0
   age 00:01:00, expires in 00:00:31, 5:4 pkts, 363:508 bytes
   id: 422a294200000313 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1258       
FIN_WAIT_2:FIN_WAIT_2
   [283551952 + 57920] wscale 0  [2454096152 + 57920] wscale 0
   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a29420000036f creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4590       
FIN_WAIT_2:FIN_WAIT_2
   [1656348739 + 57920] wscale 0  [1476131618 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000363 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1785       
FIN_WAIT_2:FIN_WAIT_2
   [378495766 + 57920] wscale 0  [449574348 + 57920] wscale 0
   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
   id: 422a294200000357 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4601       
FIN_WAIT_2:FIN_WAIT_2
   [3216638735 + 57920] wscale 0  [2886955349 + 57920] wscale 0
   age 00:00:54, expires in 00:00:37, 5:4 pkts, 363:508 bytes
   id: 422a294200000369 creatorid: 0f363004
self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4093       
FIN_WAIT_2:FIN_WAIT_2
   [3263818736 + 57920] wscale 0  [2611351584 + 57920] wscale 0
   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
   id: 422a294200000341 creatorid: 0f363004



# pfctl -si
No ALTQ support in kernel
ALTQ related functions disabled
Status: Enabled for 0 days 08:31:15             Debug: Misc

Hostid: 0x0f363004

State Table                          Total             Rate
  current entries                        0
  searches                           49637            1.6/s
  inserts                              906            0.0/s
  removals                             906            0.0/s
Counters
  match                              42759            1.4/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s


I might of run the pfctl -si to late after the test... I re-ran the test and 
when I got the symptoms again I rerans the pfctl -si output:

# pfctl -si
No ALTQ support in kernel
ALTQ related functions disabled
Status: Enabled for 0 days 08:33:18             Debug: Misc

Hostid: 0x0f363004

State Table                          Total             Rate
  current entries                       53
  searches                           50837            1.7/s
  inserts                              959            0.0/s
  removals                             906            0.0/s
Counters
  match                              43534            1.4/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s


>Daniel

Thank you,
Stephane.

_________________________________________________________________
Designer Mail isn't just fun to send, it's fun to receive. Use special 
stationery, fonts and colors. 
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
  Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.



More information about the freebsd-pf mailing list