Re: TCPv4 bad checksum

Q (Q@ping.be)
Sat, 16 Oct 1999 20:41:43 +0200


On Sat, Oct 16, 1999 at 02:46:43PM +0200, Q wrote:
> I found some of those in my log:
>
> TCPv4 bad checksum from 206.132.163.167:0050 to 212.190.22.21:04dd,
> len=436/456
> TCPv4 bad checksum from 206.132.163.167:0050 to 212.190.22.21:04f1,
> len=632/652
> TCPv4 bad checksum from 206.132.163.167:0050 to 212.190.22.21:04f9,
> len=893/913
> TCPv4 bad checksum from 206.132.163.167:0050 to 212.190.22.21:04fd,
> len=619/639
>
> len is second field in len is always 20 bigger then the first.

Oct 16 19:51:04 Q kernel: TCPv4 bad checksum from 195.162.196.245:1a07 to
193.75.247.141:043d, len=123/143

It's the first time I had a problem with that host

got tcpdump running this time ...
I was already connected for more then an hour when it happend, and still
am.

I'll start dumping a few packets to and from that host before and after it

19:50:37.127401 195.162.196.245.6663 > 193.75.247.141.1085: P
87395:87504(109) ack 5088 win 4096 (DF) (ttl 51, id 44571)

19:50:37.157444 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87504
win 32120 (DF) (ttl 64, id 22760)

19:50:46.777398 195.162.196.245.6663 > 193.75.247.141.1085: P
87504:87554(50) ack 5088 win 4096 (DF) (ttl 51, id 45032)

19:50:46.807447 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87554
win 32120 (DF) (ttl 64, id 22830)

19:50:57.357410 195.162.196.245.6663 > 193.75.247.141.1085: P
87665:87711(46) ack 5088 win 4096 (DF) (ttl 51, id 45506)

19:50:57.377444 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87711
win 32120 (DF) (ttl 64, id 22866)

19:51:00.057401 195.162.196.245.6663 > 193.75.247.141.1085: P
87711:87767(56) ack 5088 win 4096 (DF) (ttl 51, id 45666)

19:51:00.087458 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87767
win 32120 (DF) (ttl 64, id 22884)

19:51:00.135436 193.75.247.141.1085 > 195.162.196.245.6663: P
5088:5133(45) ack 87767 win 32120 (DF) (ttl 64, id 22886)

19:51:00.337429 193.75.247.141.1085 > 195.162.196.245.6663: P
5088:5133(45) ack 87767 win 32120 (DF) (ttl 64, id 22892)

19:51:00.497394 195.162.196.245.6663 > 193.75.247.141.1085: P
87711:87767(56) ack 5088 win 4096 (DF) (ttl 51, id 45693)

19:51:00.507473 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87767
win 32120 (DF) (ttl 64, id 22896)

19:51:00.547399 195.162.196.245.6663 > 193.75.247.141.1085: . ack 5133 win
4051 (DF) (ttl 51, id 45701)

19:51:00.557392 195.162.196.245.6663 > 193.75.247.141.1085: P
87767:87846(79) ack 5133 win 4096 (DF) (ttl 51, id 45703)

19:51:00.577444 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87846
win 32120 (DF) (ttl 64, id 22898)

19:51:01.167402 195.162.196.245.6663 > 193.75.247.141.1085: P
87767:87846(79) ack 5133 win 4096 (DF) (ttl 51, id 45762)

19:51:01.177440 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87846
win 32120 (DF) (ttl 64, id 22905)

this should be the one:
19:51:04.227403 195.162.196.245.6663 > 193.75.247.141.1085: P
87767:87870(103) ack 5133 win 4096 (DF) (ttl 51, id 45886)

19:51:05.467408 195.162.196.245.6663 > 193.75.247.141.1085: P
87846:87949(103) ack 5133 win 4096 (DF) (ttl 51, id 45965)

19:51:05.497438 193.75.247.141.1085 > 195.162.196.245.6663: . ack 87949
win 32120 (DF) (ttl 64, id 22924)

19:51:13.897399 195.162.196.245.6663 > 193.75.247.141.1085: P
87949:88039(90) ack 5133 win 4096 (DF) (ttl 51, id 46391)

19:51:13.917447 193.75.247.141.1085 > 195.162.196.245.6663: . ack 88039
win 32120 (DF) (ttl 64, id 22975)

19:51:18.647392 195.162.196.245.6663 > 193.75.247.141.1085: P
88039:88082(43) ack 5133 win 4096 (DF) (ttl 51, id 46577)

19:51:18.677444 193.75.247.141.1085 > 195.162.196.245.6663: . ack 88082
win 32120 (DF) (ttl 64, id 23003)

If you need more logs, or think I screwed up somewhere in pasting it,
please ask.

btw: I'm running 2.3.21

Q

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/