nat / rdr timeouts?

Stephane Raimbault segr at hotmail.com
Tue Mar 8 00:28:43 GMT 2005


Okay, I setup an OpenBSD 3.6 box with pf today as a test and I can not 
replicate the problem with OpenBSD.

In fact, running the ab test returned MUCH beter results in terms of times 
to return the page and according to top the cpu barely budged when running 
the test on the openbsd pf box.  However running top on the freebsd pf box I 
clearly see a spike in cpu traffic as the cpu idle drops to 0% for a second.


I'm currently running RELENG_5 on the freebsd box from this weekend... are 
there some debugging stuff turned on in the kernel that would explain the 
performance diffrence?

I tried to replicate the test as closely as possible however there are some 
subtle diffrences in my test.

OpenBSD test

PowerBook laptop (running ab) to an IP on the local network (openbsd ext 
interface (vlan0)) thru to the same openbsd box int interface (vlan1) to the 
web servers (10.0.11.16 and 10.0.11.17).

FreeBSD Test

IBM server running freebsd (ab) to an IP on it's local network (freebsd ext 
interface (em0) thru to the same freebsd box int interface (em1) to the web 
severs (10.0.11.16 and 10.0.11.17).

network wise it should be pretty much the same.  The only thing that came to 
mind, maybe it's because the powerbook is a better box then the IBM server 
running freebsd ?  but then seeing the CPU idle time and comparing the 
Freebsd +pf and the OpenBSD +pf being so diffrent... I ponder my question.


Hope this makes sense.  Let me know if there is any other data I can provide 
?

Thanks,
Stephane.

>From: "Stephane Raimbault" <segr at hotmail.com>
>To: daniel at benzedrine.cx
>CC: freebsd-pf at freebsd.org
>Subject: Re: nat / rdr timeouts?
>Date: Sat, 05 Mar 2005 23:08:31 -0700
>
>Thanks for the response... my debug output is below.
>
>>From: Daniel Hartmeier <daniel at benzedrine.cx>
>>To: Stephane Raimbault <segr at hotmail.com>
>>CC: freebsd-pf at freebsd.org
>>Subject: Re: nat / rdr timeouts?
>>Date: Sat, 5 Mar 2005 23:20:00 +0100
>>
>>On Sat, Mar 05, 2005 at 02:57:56PM -0700, Stephane Raimbault wrote:
>>
>> > I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same
>> > results.  Do I need to recompile any other parts of the system?
>>
>>No, that's it.
>>
>> > Do we believe I've stumbled onto a bug of pf... or is this some sort of
>> > anti-DoS feature?
>>
>>The default limit on number of states is 10,000. If further packets try
>>to create state, they are dropped. But it doesn't look like you're
>>hitting that.
>>
>>Enable debug loggin (pfctl -xm), reproduce the problem, then check
>>/var/log/messages for anything from pf.
>>
>
>Mar  5 23:17:56 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:17:56 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:17:59 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:17:59 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:18:02 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:18:02 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:18:05 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:18:05 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:18:09 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:18:09 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:18:12 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:18:12 lb1-dev kernel: pf: State failure on: 1       | 5
>Mar  5 23:18:18 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>dir=in,fwd
>Mar  5 23:18:18 lb1-dev kernel: pf: State failure on: 1       | 5
>
>
>
>>Also quote pfctl -vvss output after the problem, as well as pfctl -si,
>>please.
>>
>
># pfctl -vvss
>No ALTQ support in kernel
>ALTQ related functions disabled
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2561       
>FIN_WAIT_2:FIN_WAIT_2
>   [32585757 + 57920] wscale 0  [4030666851 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033f creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3073       
>FIN_WAIT_2:FIN_WAIT_2
>   [280614368 + 57920] wscale 0  [871170019 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000368 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1546       
>FIN_WAIT_2:FIN_WAIT_2
>   [318290820 + 57920] wscale 0  [3755105029 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000349 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3347       
>FIN_WAIT_2:FIN_WAIT_2
>   [1140076597 + 57920] wscale 0  [4121153694 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031b creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2836       
>FIN_WAIT_2:FIN_WAIT_2
>   [2909277378 + 57920] wscale 0  [448910790 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000370 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2327       
>FIN_WAIT_2:FIN_WAIT_2
>   [2987561263 + 57920] wscale 0  [4146806117 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000318 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2329       
>FIN_WAIT_2:FIN_WAIT_2
>   [1833281301 + 57920] wscale 0  [1053857949 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000327 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1818       
>FIN_WAIT_2:FIN_WAIT_2
>   [2636697734 + 57920] wscale 0  [2763808572 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000353 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4380       
>FIN_WAIT_2:FIN_WAIT_2
>   [1563439928 + 57920] wscale 0  [2156220237 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000375 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3613       
>FIN_WAIT_2:FIN_WAIT_2
>   [4269333757 + 57920] wscale 0  [28302277 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000325 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2334       
>FIN_WAIT_2:FIN_WAIT_2
>   [4236319117 + 57920] wscale 0  [756984446 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000376 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1570       
>FIN_WAIT_2:FIN_WAIT_2
>   [1467784327 + 57920] wscale 0  [1805572515 + 57920] wscale 0
>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000389 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2854       
>FIN_WAIT_2:FIN_WAIT_2
>   [1264223110 + 57920] wscale 0  [3114805151 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000380 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2599       
>FIN_WAIT_2:FIN_WAIT_2
>   [2493007175 + 57920] wscale 0  [4071674965 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033b creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4647       
>FIN_WAIT_2:FIN_WAIT_2
>   [1519840616 + 57920] wscale 0  [1155588281 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000351 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2600       
>FIN_WAIT_2:FIN_WAIT_2
>   [3829938788 + 57920] wscale 0  [2288730060 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000346 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1323       
>FIN_WAIT_2:FIN_WAIT_2
>   [3299837026 + 57920] wscale 0  [571661919 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037f creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4139       
>FIN_WAIT_2:FIN_WAIT_2
>   [2936258233 + 57920] wscale 0  [3552485098 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1069       
>FIN_WAIT_2:FIN_WAIT_2
>   [3429734760 + 57920] wscale 0  [1047686037 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000350 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1582       
>FIN_WAIT_2:FIN_WAIT_2
>   [2239408408 + 57920] wscale 0  [792523365 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000356 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1839       
>FIN_WAIT_2:FIN_WAIT_2
>   [1084975327 + 57920] wscale 0  [3468075791 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035c creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4402       
>FIN_WAIT_2:FIN_WAIT_2
>   [1734033910 + 57920] wscale 0  [4212345601 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033c creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3636       
>FIN_WAIT_2:FIN_WAIT_2
>   [1247559674 + 57920] wscale 0  [3855641134 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036c creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4917       
>FIN_WAIT_2:FIN_WAIT_2
>   [2579269706 + 57920] wscale 0  [2765039414 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a294200000340 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1334       
>FIN_WAIT_2:FIN_WAIT_2
>   [1322299975 + 57920] wscale 0  [4143165048 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000352 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1593       
>FIN_WAIT_2:FIN_WAIT_2
>   [3145580381 + 57920] wscale 0  [1476283631 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000345 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2361       
>TIME_WAIT:TIME_WAIT
>   [1651992099 + 57344] wscale 0  [1675199900 + 57345] wscale 0
>   age 00:00:53, expires in 00:00:37, 2:1 pkts, 100:60 bytes
>   id: 422a294200000377 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3132       
>FIN_WAIT_2:FIN_WAIT_2
>   [54760795 + 57920] wscale 0  [685586651 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3388       
>FIN_WAIT_2:FIN_WAIT_2
>   [1740195130 + 57920] wscale 0  [2837513788 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000330 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4668       
>FIN_WAIT_2:FIN_WAIT_2
>   [4153305444 + 57920] wscale 0  [3657625607 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000362 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2110       
>FIN_WAIT_2:FIN_WAIT_2
>   [1680438376 + 57920] wscale 0  [4124389714 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032b creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4927       
>FIN_WAIT_2:FIN_WAIT_2
>   [3926918789 + 57920] wscale 0  [1578868844 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032f creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2369       
>FIN_WAIT_2:FIN_WAIT_2
>   [3264887916 + 57920] wscale 0  [1040383065 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000373 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3138       
>FIN_WAIT_2:FIN_WAIT_2
>   [3668537022 + 57920] wscale 0  [4070704551 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000384 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4677       
>FIN_WAIT_2:FIN_WAIT_2
>   [4255514426 + 57920] wscale 0  [2108554394 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031e creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1351       
>FIN_WAIT_2:FIN_WAIT_2
>   [650459315 + 57920] wscale 0  [3007417138 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035d creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4935       
>FIN_WAIT_2:FIN_WAIT_2
>   [2640203207 + 57920] wscale 0  [1946606900 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1864       
>FIN_WAIT_2:FIN_WAIT_2
>   [302555830 + 57920] wscale 0  [4259092904 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4936       
>FIN_WAIT_2:FIN_WAIT_2
>   [3747285884 + 57920] wscale 0  [1707501039 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000364 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4426       
>FIN_WAIT_2:FIN_WAIT_2
>   [4052825702 + 57920] wscale 0  [1998932217 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4429       
>FIN_WAIT_2:FIN_WAIT_2
>   [2963041429 + 57920] wscale 0  [2854499682 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000328 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4941       
>FIN_WAIT_2:FIN_WAIT_2
>   [363310172 + 57920] wscale 0  [1840047747 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000331 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1871       
>FIN_WAIT_2:FIN_WAIT_2
>   [1551203117 + 57920] wscale 0  [1422169461 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000329 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3152       
>FIN_WAIT_2:FIN_WAIT_2
>   [1387806479 + 57920] wscale 0  [1346138440 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000320 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4944       
>FIN_WAIT_2:FIN_WAIT_2
>   [2112290315 + 57920] wscale 0  [3096897628 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037e creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3921       
>FIN_WAIT_2:FIN_WAIT_2
>   [2276016873 + 57920] wscale 0  [2659410744 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000333 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4692       
>FIN_WAIT_2:FIN_WAIT_2
>   [4210818300 + 57920] wscale 0  [3178408136 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000319 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4696       
>FIN_WAIT_2:FIN_WAIT_2
>   [3697003529 + 57920] wscale 0  [1024494100 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000336 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1116       
>FIN_WAIT_2:FIN_WAIT_2
>   [2568047902 + 57920] wscale 0  [2313094524 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000383 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1372       
>FIN_WAIT_2:FIN_WAIT_2
>   [2263179419 + 57920] wscale 0  [665532303 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035b creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1119       
>FIN_WAIT_2:FIN_WAIT_2
>   [3415385225 + 57920] wscale 0  [1370230622 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000382 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3938       
>FIN_WAIT_2:FIN_WAIT_2
>   [3603803766 + 57920] wscale 0  [276202704 + 57920] wscale 0
>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000386 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4456       
>FIN_WAIT_2:FIN_WAIT_2
>   [48494854 + 57920] wscale 0  [1301768752 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032e creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2153       
>FIN_WAIT_2:FIN_WAIT_2
>   [2753680443 + 57920] wscale 0  [557071720 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031f creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4714       
>FIN_WAIT_2:FIN_WAIT_2
>   [1504808638 + 57920] wscale 0  [2927860233 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3693       
>FIN_WAIT_2:FIN_WAIT_2
>   [416273073 + 57920] wscale 0  [4216442984 + 57920] wscale 0
>   age 00:01:00, expires in 00:00:30, 5:4 pkts, 363:508 bytes
>   id: 422a294200000312 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2159       
>FIN_WAIT_2:FIN_WAIT_2
>   [617626453 + 57920] wscale 0  [3344368062 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000321 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3951       
>FIN_WAIT_2:FIN_WAIT_2
>   [2792267335 + 57920] wscale 0  [997036292 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000379 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2673       
>FIN_WAIT_2:FIN_WAIT_2
>   [4169187362 + 57920] wscale 0  [2600215828 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000332 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3698       
>FIN_WAIT_2:FIN_WAIT_2
>   [4173377263 + 57920] wscale 0  [113027635 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000355 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2169       
>FIN_WAIT_2:FIN_WAIT_2
>   [3490211889 + 57920] wscale 0  [2950876502 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037c creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2937       
>FIN_WAIT_2:FIN_WAIT_2
>   [978963795 + 57920] wscale 0  [1899890588 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000354 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4473       
>FIN_WAIT_2:FIN_WAIT_2
>   [20706720 + 57920] wscale 0  [308909836 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000315 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3706       
>FIN_WAIT_2:FIN_WAIT_2
>   [1571667015 + 57920] wscale 0  [3670251619 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000381 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4732       
>FIN_WAIT_2:FIN_WAIT_2
>   [558353217 + 57920] wscale 0  [1843229679 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000339 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1150       
>FIN_WAIT_2:FIN_WAIT_2
>   [69371452 + 57920] wscale 0  [2527043649 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034e creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4738       
>FIN_WAIT_2:FIN_WAIT_2
>   [3004764914 + 57920] wscale 0  [3140248529 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035f creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1155       
>FIN_WAIT_2:FIN_WAIT_2
>   [1742408037 + 57920] wscale 0  [217529573 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000359 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4996       
>FIN_WAIT_2:FIN_WAIT_2
>   [3353863411 + 57920] wscale 0  [2037795993 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2438       
>FIN_WAIT_2:FIN_WAIT_2
>   [2363515767 + 57920] wscale 0  [940185069 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2440       
>FIN_WAIT_2:FIN_WAIT_2
>   [1512264113 + 57920] wscale 0  [1583872006 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000326 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3977       
>FIN_WAIT_2:FIN_WAIT_2
>   [3375214689 + 57920] wscale 0  [3340380428 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000338 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2442       
>FIN_WAIT_2:FIN_WAIT_2
>   [366541085 + 57920] wscale 0  [4229618380 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000365 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2955       
>FIN_WAIT_2:FIN_WAIT_2
>   [3023032248 + 57920] wscale 0  [2714578033 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037b creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1676       
>FIN_WAIT_2:FIN_WAIT_2
>   [2143584703 + 57920] wscale 0  [2632152330 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000334 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2957       
>FIN_WAIT_2:FIN_WAIT_2
>   [3376655763 + 57920] wscale 0  [1962882777 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2959       
>FIN_WAIT_2:FIN_WAIT_2
>   [2381496694 + 57920] wscale 0  [3907940618 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036e creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2193       
>FIN_WAIT_2:FIN_WAIT_2
>   [1147009346 + 57920] wscale 0  [652578834 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031c creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1173       
>FIN_WAIT_2:FIN_WAIT_2
>   [3847048096 + 57920] wscale 0  [4202192232 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000367 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2966       
>FIN_WAIT_2:FIN_WAIT_2
>   [1704883050 + 57920] wscale 0  [397640671 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034b creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1176       
>FIN_WAIT_2:FIN_WAIT_2
>   [2908611795 + 57920] wscale 0  [1143955128 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034f creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3225       
>TIME_WAIT:TIME_WAIT
>   [4053421973 + 57344] wscale 0  [1116197573 + 57345] wscale 0
>   age 00:00:57, expires in 00:00:33, 2:1 pkts, 100:60 bytes
>   id: 422a294200000344 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3227       
>FIN_WAIT_2:FIN_WAIT_2
>   [3697384915 + 57920] wscale 0  [4194776544 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000323 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4764       
>FIN_WAIT_2:FIN_WAIT_2
>   [3426015243 + 57920] wscale 0  [3468954857 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a29420000031a creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2721       
>FIN_WAIT_2:FIN_WAIT_2
>   [3210917859 + 57920] wscale 0  [501355691 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a29420000035e creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2214       
>FIN_WAIT_2:FIN_WAIT_2
>   [2024368372 + 57920] wscale 0  [1315702046 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2983       
>FIN_WAIT_2:FIN_WAIT_2
>   [3207150264 + 57920] wscale 0  [2168442372 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a294200000342 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4263       
>FIN_WAIT_2:FIN_WAIT_2
>   [46597085 + 57920] wscale 0  [4061701497 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a29420000032c creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2984       
>FIN_WAIT_2:FIN_WAIT_2
>   [785309605 + 57920] wscale 0  [178732332 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000335 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4265       
>FIN_WAIT_2:FIN_WAIT_2
>   [1077034523 + 57920] wscale 0  [508685133 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000347 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2474       
>FIN_WAIT_2:FIN_WAIT_2
>   [3579823839 + 57920] wscale 0  [3186549033 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000317 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3501       
>FIN_WAIT_2:FIN_WAIT_2
>   [830389565 + 57920] wscale 0  [3726843152 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000366 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4785       
>FIN_WAIT_2:FIN_WAIT_2
>   [2419913039 + 57920] wscale 0  [2289781021 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a294200000348 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3511       
>FIN_WAIT_2:FIN_WAIT_2
>   [2249296099 + 57920] wscale 0  [2932871839 + 57920] wscale 0
>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000385 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4794       
>FIN_WAIT_2:FIN_WAIT_2
>   [3411371868 + 57920] wscale 0  [2783458838 + 57920] wscale 0
>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000387 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4539       
>FIN_WAIT_2:FIN_WAIT_2
>   [1104604839 + 57920] wscale 0  [2842567409 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a29420000033e creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3519       
>FIN_WAIT_2:FIN_WAIT_2
>   [3740703471 + 57920] wscale 0  [87932817 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000374 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3521       
>FIN_WAIT_2:FIN_WAIT_2
>   [2968103458 + 57920] wscale 0  [3601469586 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000316 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2249       
>FIN_WAIT_2:FIN_WAIT_2
>   [482606504 + 57920] wscale 0  [2208108060 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000372 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1994       
>FIN_WAIT_2:FIN_WAIT_2
>   [39371535 + 57920] wscale 0  [3193833702 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000314 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4818       
>FIN_WAIT_2:FIN_WAIT_2
>   [1810505629 + 57920] wscale 0  [2489348362 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000371 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1238       
>FIN_WAIT_2:FIN_WAIT_2
>   [1759844756 + 57920] wscale 0  [1414167188 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a294200000378 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2262       
>FIN_WAIT_2:FIN_WAIT_2
>   [837001507 + 57920] wscale 0  [3660905760 + 57920] wscale 0
>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>   id: 422a29420000037d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3030       
>FIN_WAIT_2:FIN_WAIT_2
>   [2939379438 + 57920] wscale 0  [2989656088 + 57920] wscale 0
>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>   id: 422a294200000388 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4566       
>FIN_WAIT_2:FIN_WAIT_2
>   [36874042 + 57920] wscale 0  [1489690186 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036d creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3033       
>FIN_WAIT_2:FIN_WAIT_2
>   [894623290 + 57920] wscale 0  [1705678299 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000324 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4058       
>FIN_WAIT_2:FIN_WAIT_2
>   [3593573975 + 57920] wscale 0  [4218672704 + 57920] wscale 0
>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000322 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1499       
>FIN_WAIT_2:FIN_WAIT_2
>   [3353910087 + 57920] wscale 0  [2313641214 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000361 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1244       
>FIN_WAIT_2:FIN_WAIT_2
>   [2144658656 + 57920] wscale 0  [3510611502 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000360 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3551       
>FIN_WAIT_2:FIN_WAIT_2
>   [3266650438 + 57920] wscale 0  [1463919518 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036b creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4064       
>FIN_WAIT_2:FIN_WAIT_2
>   [480151856 + 57920] wscale 0  [111602781 + 57920] wscale 0
>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>   id: 422a29420000034c creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3041       
>FIN_WAIT_2:FIN_WAIT_2
>   [3790883218 + 57920] wscale 0  [1635610553 + 57920] wscale 0
>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>   id: 422a294200000337 creatorid: 0f363004
>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2786       
>FIN_WAIT_2:FIN_WAIT_2
>   [1503037157 + 57920] wscale 0  [2999158633 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000358 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4837       
>FIN_WAIT_2:FIN_WAIT_2
>   [3904040791 + 57920] wscale 0  [1708743304 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a294200000343 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3561       
>FIN_WAIT_2:FIN_WAIT_2
>   [760186488 + 57920] wscale 0  [3036802596 + 57920] wscale 0
>   age 00:01:00, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>   id: 422a294200000313 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1258       
>FIN_WAIT_2:FIN_WAIT_2
>   [283551952 + 57920] wscale 0  [2454096152 + 57920] wscale 0
>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a29420000036f creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4590       
>FIN_WAIT_2:FIN_WAIT_2
>   [1656348739 + 57920] wscale 0  [1476131618 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000363 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1785       
>FIN_WAIT_2:FIN_WAIT_2
>   [378495766 + 57920] wscale 0  [449574348 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>   id: 422a294200000357 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4601       
>FIN_WAIT_2:FIN_WAIT_2
>   [3216638735 + 57920] wscale 0  [2886955349 + 57920] wscale 0
>   age 00:00:54, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>   id: 422a294200000369 creatorid: 0f363004
>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4093       
>FIN_WAIT_2:FIN_WAIT_2
>   [3263818736 + 57920] wscale 0  [2611351584 + 57920] wscale 0
>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>   id: 422a294200000341 creatorid: 0f363004
>
>
>
># pfctl -si
>No ALTQ support in kernel
>ALTQ related functions disabled
>Status: Enabled for 0 days 08:31:15             Debug: Misc
>
>Hostid: 0x0f363004
>
>State Table                          Total             Rate
>  current entries                        0
>  searches                           49637            1.6/s
>  inserts                              906            0.0/s
>  removals                             906            0.0/s
>Counters
>  match                              42759            1.4/s
>  bad-offset                             0            0.0/s
>  fragment                               0            0.0/s
>  short                                  0            0.0/s
>  normalize                              0            0.0/s
>  memory                                 0            0.0/s
>
>
>I might of run the pfctl -si to late after the test... I re-ran the test 
>and when I got the symptoms again I rerans the pfctl -si output:
>
># pfctl -si
>No ALTQ support in kernel
>ALTQ related functions disabled
>Status: Enabled for 0 days 08:33:18             Debug: Misc
>
>Hostid: 0x0f363004
>
>State Table                          Total             Rate
>  current entries                       53
>  searches                           50837            1.7/s
>  inserts                              959            0.0/s
>  removals                             906            0.0/s
>Counters
>  match                              43534            1.4/s
>  bad-offset                             0            0.0/s
>  fragment                               0            0.0/s
>  short                                  0            0.0/s
>  normalize                              0            0.0/s
>  memory                                 0            0.0/s
>
>
>>Daniel
>
>Thank you,
>Stephane.
>
>_________________________________________________________________
>Designer Mail isn't just fun to send, it's fun to receive. Use special 
>stationery, fonts and colors. 
>http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
>  Start enjoying all the benefits of MSN® Premium right now and get the 
>first two months FREE*.
>
>_______________________________________________
>freebsd-pf at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-pf
>To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"

_________________________________________________________________
Powerful Parental Controls Let your child discover the best the Internet has 
to offer.  
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
  Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.



More information about the freebsd-pf mailing list