nat / rdr timeouts?

Stephane Raimbault segr at hotmail.com
Tue Mar 8 00:42:50 GMT 2005


Actually... let me eat my words a bit... I forgot I was debugging on the 
freebsd - pf box... I set it back to pfctl -x urgent and the performance is 
as good as the openbsd box again... however still that timeout problem.

Sorry ... hit send too fast apparently.

Thanks for the help,
Stephane.

>From: "Stephane Raimbault" <segr at hotmail.com>
>To: segr at hotmail.com, daniel at benzedrine.cx
>CC: freebsd-pf at freebsd.org
>Subject: Re: nat / rdr timeouts?
>Date: Mon, 07 Mar 2005 17:28:41 -0700
>
>Okay, I setup an OpenBSD 3.6 box with pf today as a test and I can not 
>replicate the problem with OpenBSD.
>
>In fact, running the ab test returned MUCH beter results in terms of times 
>to return the page and according to top the cpu barely budged when running 
>the test on the openbsd pf box.  However running top on the freebsd pf box 
>I clearly see a spike in cpu traffic as the cpu idle drops to 0% for a 
>second.
>
>
>I'm currently running RELENG_5 on the freebsd box from this weekend... are 
>there some debugging stuff turned on in the kernel that would explain the 
>performance diffrence?
>
>I tried to replicate the test as closely as possible however there are some 
>subtle diffrences in my test.
>
>OpenBSD test
>
>PowerBook laptop (running ab) to an IP on the local network (openbsd ext 
>interface (vlan0)) thru to the same openbsd box int interface (vlan1) to 
>the web servers (10.0.11.16 and 10.0.11.17).
>
>FreeBSD Test
>
>IBM server running freebsd (ab) to an IP on it's local network (freebsd ext 
>interface (em0) thru to the same freebsd box int interface (em1) to the web 
>severs (10.0.11.16 and 10.0.11.17).
>
>network wise it should be pretty much the same.  The only thing that came 
>to mind, maybe it's because the powerbook is a better box then the IBM 
>server running freebsd ?  but then seeing the CPU idle time and comparing 
>the Freebsd +pf and the OpenBSD +pf being so diffrent... I ponder my 
>question.
>
>
>Hope this makes sense.  Let me know if there is any other data I can 
>provide ?
>
>Thanks,
>Stephane.
>
>>From: "Stephane Raimbault" <segr at hotmail.com>
>>To: daniel at benzedrine.cx
>>CC: freebsd-pf at freebsd.org
>>Subject: Re: nat / rdr timeouts?
>>Date: Sat, 05 Mar 2005 23:08:31 -0700
>>
>>Thanks for the response... my debug output is below.
>>
>>>From: Daniel Hartmeier <daniel at benzedrine.cx>
>>>To: Stephane Raimbault <segr at hotmail.com>
>>>CC: freebsd-pf at freebsd.org
>>>Subject: Re: nat / rdr timeouts?
>>>Date: Sat, 5 Mar 2005 23:20:00 +0100
>>>
>>>On Sat, Mar 05, 2005 at 02:57:56PM -0700, Stephane Raimbault wrote:
>>>
>>> > I cvsup'd RELENG_5 and recompiled the kernel and I'm seeing the same
>>> > results.  Do I need to recompile any other parts of the system?
>>>
>>>No, that's it.
>>>
>>> > Do we believe I've stumbled onto a bug of pf... or is this some sort 
>>>of
>>> > anti-DoS feature?
>>>
>>>The default limit on number of states is 10,000. If further packets try
>>>to create state, they are dropped. But it doesn't look like you're
>>>hitting that.
>>>
>>>Enable debug loggin (pfctl -xm), reproduce the problem, then check
>>>/var/log/messages for anything from pf.
>>>
>>
>>Mar  5 23:17:56 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:17:56 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:17:59 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:17:59 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:18:02 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:18:02 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:18:05 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:18:05 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:18:09 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:18:09 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:18:12 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:18:12 lb1-dev kernel: pf: State failure on: 1       | 5
>>Mar  5 23:18:18 lb1-dev kernel: pf: BAD state: TCP 10.0.11.16:80 
>>204.9.110.170:80 204.9.110.139:1372 [lo=665532303 high=665590223 win=57920 
>>modulator=0 wscale=0] [lo=2263179419 high=2263237339 win=57920 modulator=0 
>>wscale=0] 9:9 S seq=669705236 ack=2263179419 len=0 ackskew=0 pkts=5:4 
>>dir=in,fwd
>>Mar  5 23:18:18 lb1-dev kernel: pf: State failure on: 1       | 5
>>
>>
>>
>>>Also quote pfctl -vvss output after the problem, as well as pfctl -si,
>>>please.
>>>
>>
>># pfctl -vvss
>>No ALTQ support in kernel
>>ALTQ related functions disabled
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2561       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [32585757 + 57920] wscale 0  [4030666851 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033f creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3073       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [280614368 + 57920] wscale 0  [871170019 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000368 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1546       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [318290820 + 57920] wscale 0  [3755105029 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000349 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3347       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1140076597 + 57920] wscale 0  [4121153694 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031b creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2836       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2909277378 + 57920] wscale 0  [448910790 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000370 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2327       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2987561263 + 57920] wscale 0  [4146806117 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000318 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2329       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1833281301 + 57920] wscale 0  [1053857949 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000327 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1818       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2636697734 + 57920] wscale 0  [2763808572 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000353 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4380       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1563439928 + 57920] wscale 0  [2156220237 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000375 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3613       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4269333757 + 57920] wscale 0  [28302277 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000325 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2334       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4236319117 + 57920] wscale 0  [756984446 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000376 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1570       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1467784327 + 57920] wscale 0  [1805572515 + 57920] wscale 0
>>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000389 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2854       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1264223110 + 57920] wscale 0  [3114805151 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000380 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2599       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2493007175 + 57920] wscale 0  [4071674965 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033b creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4647       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1519840616 + 57920] wscale 0  [1155588281 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000351 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2600       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3829938788 + 57920] wscale 0  [2288730060 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000346 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1323       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3299837026 + 57920] wscale 0  [571661919 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037f creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4139       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2936258233 + 57920] wscale 0  [3552485098 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1069       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3429734760 + 57920] wscale 0  [1047686037 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000350 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1582       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2239408408 + 57920] wscale 0  [792523365 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000356 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1839       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1084975327 + 57920] wscale 0  [3468075791 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035c creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4402       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1734033910 + 57920] wscale 0  [4212345601 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033c creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3636       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1247559674 + 57920] wscale 0  [3855641134 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036c creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4917       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2579269706 + 57920] wscale 0  [2765039414 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000340 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1334       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1322299975 + 57920] wscale 0  [4143165048 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000352 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1593       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3145580381 + 57920] wscale 0  [1476283631 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000345 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2361       
>>TIME_WAIT:TIME_WAIT
>>   [1651992099 + 57344] wscale 0  [1675199900 + 57345] wscale 0
>>   age 00:00:53, expires in 00:00:37, 2:1 pkts, 100:60 bytes
>>   id: 422a294200000377 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3132       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [54760795 + 57920] wscale 0  [685586651 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3388       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1740195130 + 57920] wscale 0  [2837513788 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000330 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4668       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4153305444 + 57920] wscale 0  [3657625607 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000362 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2110       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1680438376 + 57920] wscale 0  [4124389714 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032b creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4927       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3926918789 + 57920] wscale 0  [1578868844 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032f creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2369       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3264887916 + 57920] wscale 0  [1040383065 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000373 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3138       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3668537022 + 57920] wscale 0  [4070704551 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000384 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4677       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4255514426 + 57920] wscale 0  [2108554394 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031e creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1351       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [650459315 + 57920] wscale 0  [3007417138 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035d creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4935       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2640203207 + 57920] wscale 0  [1946606900 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1864       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [302555830 + 57920] wscale 0  [4259092904 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4936       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3747285884 + 57920] wscale 0  [1707501039 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000364 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4426       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4052825702 + 57920] wscale 0  [1998932217 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4429       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2963041429 + 57920] wscale 0  [2854499682 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000328 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4941       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [363310172 + 57920] wscale 0  [1840047747 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000331 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1871       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1551203117 + 57920] wscale 0  [1422169461 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000329 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3152       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1387806479 + 57920] wscale 0  [1346138440 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000320 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4944       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2112290315 + 57920] wscale 0  [3096897628 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037e creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3921       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2276016873 + 57920] wscale 0  [2659410744 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000333 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4692       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4210818300 + 57920] wscale 0  [3178408136 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000319 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4696       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3697003529 + 57920] wscale 0  [1024494100 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000336 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1116       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2568047902 + 57920] wscale 0  [2313094524 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000383 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1372       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2263179419 + 57920] wscale 0  [665532303 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035b creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1119       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3415385225 + 57920] wscale 0  [1370230622 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000382 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3938       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3603803766 + 57920] wscale 0  [276202704 + 57920] wscale 0
>>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000386 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4456       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [48494854 + 57920] wscale 0  [1301768752 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032e creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2153       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2753680443 + 57920] wscale 0  [557071720 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031f creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4714       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1504808638 + 57920] wscale 0  [2927860233 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3693       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [416273073 + 57920] wscale 0  [4216442984 + 57920] wscale 0
>>   age 00:01:00, expires in 00:00:30, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000312 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2159       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [617626453 + 57920] wscale 0  [3344368062 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000321 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3951       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2792267335 + 57920] wscale 0  [997036292 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000379 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2673       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4169187362 + 57920] wscale 0  [2600215828 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000332 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3698       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [4173377263 + 57920] wscale 0  [113027635 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000355 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2169       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3490211889 + 57920] wscale 0  [2950876502 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037c creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2937       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [978963795 + 57920] wscale 0  [1899890588 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000354 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4473       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [20706720 + 57920] wscale 0  [308909836 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000315 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3706       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1571667015 + 57920] wscale 0  [3670251619 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000381 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4732       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [558353217 + 57920] wscale 0  [1843229679 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000339 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1150       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [69371452 + 57920] wscale 0  [2527043649 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034e creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4738       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3004764914 + 57920] wscale 0  [3140248529 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035f creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1155       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1742408037 + 57920] wscale 0  [217529573 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000359 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4996       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3353863411 + 57920] wscale 0  [2037795993 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2438       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2363515767 + 57920] wscale 0  [940185069 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2440       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1512264113 + 57920] wscale 0  [1583872006 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000326 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3977       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3375214689 + 57920] wscale 0  [3340380428 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000338 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2442       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [366541085 + 57920] wscale 0  [4229618380 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000365 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2955       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3023032248 + 57920] wscale 0  [2714578033 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037b creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1676       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2143584703 + 57920] wscale 0  [2632152330 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000334 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2957       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3376655763 + 57920] wscale 0  [1962882777 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2959       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2381496694 + 57920] wscale 0  [3907940618 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036e creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2193       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1147009346 + 57920] wscale 0  [652578834 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031c creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1173       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3847048096 + 57920] wscale 0  [4202192232 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000367 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2966       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1704883050 + 57920] wscale 0  [397640671 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034b creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1176       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2908611795 + 57920] wscale 0  [1143955128 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034f creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3225       
>>TIME_WAIT:TIME_WAIT
>>   [4053421973 + 57344] wscale 0  [1116197573 + 57345] wscale 0
>>   age 00:00:57, expires in 00:00:33, 2:1 pkts, 100:60 bytes
>>   id: 422a294200000344 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3227       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3697384915 + 57920] wscale 0  [4194776544 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000323 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4764       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3426015243 + 57920] wscale 0  [3468954857 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000031a creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2721       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3210917859 + 57920] wscale 0  [501355691 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000035e creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2214       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2024368372 + 57920] wscale 0  [1315702046 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2983       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3207150264 + 57920] wscale 0  [2168442372 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000342 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4263       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [46597085 + 57920] wscale 0  [4061701497 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000032c creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2984       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [785309605 + 57920] wscale 0  [178732332 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000335 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4265       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1077034523 + 57920] wscale 0  [508685133 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000347 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2474       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3579823839 + 57920] wscale 0  [3186549033 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000317 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3501       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [830389565 + 57920] wscale 0  [3726843152 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000366 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4785       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2419913039 + 57920] wscale 0  [2289781021 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000348 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3511       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2249296099 + 57920] wscale 0  [2932871839 + 57920] wscale 0
>>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000385 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4794       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3411371868 + 57920] wscale 0  [2783458838 + 57920] wscale 0
>>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000387 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4539       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1104604839 + 57920] wscale 0  [2842567409 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000033e creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3519       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3740703471 + 57920] wscale 0  [87932817 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000374 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3521       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2968103458 + 57920] wscale 0  [3601469586 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000316 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2249       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [482606504 + 57920] wscale 0  [2208108060 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000372 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1994       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [39371535 + 57920] wscale 0  [3193833702 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000314 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4818       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1810505629 + 57920] wscale 0  [2489348362 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000371 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1238       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1759844756 + 57920] wscale 0  [1414167188 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000378 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:2262       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [837001507 + 57920] wscale 0  [3660905760 + 57920] wscale 0
>>   age 00:00:51, expires in 00:00:39, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000037d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3030       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2939379438 + 57920] wscale 0  [2989656088 + 57920] wscale 0
>>   age 00:00:50, expires in 00:00:40, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000388 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4566       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [36874042 + 57920] wscale 0  [1489690186 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036d creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:3033       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [894623290 + 57920] wscale 0  [1705678299 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000324 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4058       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3593573975 + 57920] wscale 0  [4218672704 + 57920] wscale 0
>>   age 00:00:59, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000322 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1499       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3353910087 + 57920] wscale 0  [2313641214 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000361 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:1244       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [2144658656 + 57920] wscale 0  [3510611502 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000360 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3551       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3266650438 + 57920] wscale 0  [1463919518 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036b creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:4064       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [480151856 + 57920] wscale 0  [111602781 + 57920] wscale 0
>>   age 00:00:55, expires in 00:00:35, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000034c creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3041       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3790883218 + 57920] wscale 0  [1635610553 + 57920] wscale 0
>>   age 00:00:58, expires in 00:00:32, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000337 creatorid: 0f363004
>>self tcp 10.0.11.17:80 <- 204.9.110.170:80 <- 204.9.110.139:2786       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1503037157 + 57920] wscale 0  [2999158633 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000358 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4837       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3904040791 + 57920] wscale 0  [1708743304 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000343 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:3561       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [760186488 + 57920] wscale 0  [3036802596 + 57920] wscale 0
>>   age 00:01:00, expires in 00:00:31, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000313 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1258       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [283551952 + 57920] wscale 0  [2454096152 + 57920] wscale 0
>>   age 00:00:53, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a29420000036f creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4590       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [1656348739 + 57920] wscale 0  [1476131618 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000363 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:1785       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [378495766 + 57920] wscale 0  [449574348 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:36, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000357 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4601       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3216638735 + 57920] wscale 0  [2886955349 + 57920] wscale 0
>>   age 00:00:54, expires in 00:00:37, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000369 creatorid: 0f363004
>>self tcp 10.0.11.16:80 <- 204.9.110.170:80 <- 204.9.110.139:4093       
>>FIN_WAIT_2:FIN_WAIT_2
>>   [3263818736 + 57920] wscale 0  [2611351584 + 57920] wscale 0
>>   age 00:00:57, expires in 00:00:33, 5:4 pkts, 363:508 bytes
>>   id: 422a294200000341 creatorid: 0f363004
>>
>>
>>
>># pfctl -si
>>No ALTQ support in kernel
>>ALTQ related functions disabled
>>Status: Enabled for 0 days 08:31:15             Debug: Misc
>>
>>Hostid: 0x0f363004
>>
>>State Table                          Total             Rate
>>  current entries                        0
>>  searches                           49637            1.6/s
>>  inserts                              906            0.0/s
>>  removals                             906            0.0/s
>>Counters
>>  match                              42759            1.4/s
>>  bad-offset                             0            0.0/s
>>  fragment                               0            0.0/s
>>  short                                  0            0.0/s
>>  normalize                              0            0.0/s
>>  memory                                 0            0.0/s
>>
>>
>>I might of run the pfctl -si to late after the test... I re-ran the test 
>>and when I got the symptoms again I rerans the pfctl -si output:
>>
>># pfctl -si
>>No ALTQ support in kernel
>>ALTQ related functions disabled
>>Status: Enabled for 0 days 08:33:18             Debug: Misc
>>
>>Hostid: 0x0f363004
>>
>>State Table                          Total             Rate
>>  current entries                       53
>>  searches                           50837            1.7/s
>>  inserts                              959            0.0/s
>>  removals                             906            0.0/s
>>Counters
>>  match                              43534            1.4/s
>>  bad-offset                             0            0.0/s
>>  fragment                               0            0.0/s
>>  short                                  0            0.0/s
>>  normalize                              0            0.0/s
>>  memory                                 0            0.0/s
>>
>>
>>>Daniel
>>
>>Thank you,
>>Stephane.
>>
>>_________________________________________________________________
>>Designer Mail isn't just fun to send, it's fun to receive. Use special 
>>stationery, fonts and colors. 
>>http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
>>  Start enjoying all the benefits of MSN® Premium right now and get the 
>>first two months FREE*.
>>
>>_______________________________________________
>>freebsd-pf at freebsd.org mailing list
>>http://lists.freebsd.org/mailman/listinfo/freebsd-pf
>>To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
>

_________________________________________________________________
Take charge with a pop-up guard built on patented Microsoft® SmartScreen 
Technology  
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
  Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.



More information about the freebsd-pf mailing list