FreeBSD CURRENT 7.x

Kris Kennaway kris at obsecurity.org
Wed Jun 6 19:43:07 UTC 2007


On Wed, Jun 06, 2007 at 10:24:59AM +0000, Outback Dingo wrote:
> The past few days ive been getting errors and "sluggishness" on a system
> with both sk and msk chips in it. Any idea how to track this down or whats
> changed that has affected the performance of these cards ?? Noticed also its
> two different errors. These cards we functioning fine. Help appreciated,
> Thanks in advance

Did you remember to turn off the debugging features (witness, etc)?

> The application is lighttpd on port 80. kernel is pretty generic with pf
> enabled
> 
> 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Wed Jun  6 03:50:46 PHT 2007
> 
> TCP: [xxx.xxx.xxx.xxx]:2400 to [xxx.xxx.xxx.xxx]:80 tcpflags 0x11<FIN,ACK>;
> syncache_expand: Segment failed SYNCOOKIE authentication, segment rejected
> (probably spoofed)
> TCP: [xxx.xxx.xxx.xxx]:12236 to [xxx.xxx.xxx.xxx]:80 tcpflags 0x4<RST>;
> tcp_input: Listen socket: Spurious RST, segment rejected

These are indications of bugs in TCP in 7.0, hopefully they will be
fixed soon.  If the debugging is not your problem this might cause
poor TCP performance on those particular connections.

Kris


More information about the freebsd-questions mailing list