Re: Possible BUG in IPv4 TCP window handling, all recent2.4.x/2.6.x kernels

From: Stephen Hemminger
Date: Fri Sep 02 2005 - 00:20:09 EST


On Fri, 02 Sep 2005 13:51:38 +0900 (JST)
Noritoshi Demizu <demizu@xxxxxxxxxxxxxx> wrote:

> Below may not be directly related to the cause of the problem.
> But I think some window sizes in your mail need to be re-evaluated.
>
> > 11:29:54.961998 10.2.20.246.33060 > 10.2.224.182.8700: S 1972343059:1972343059(0) win 5840 <mss 1460,sackOK,timestamp 225781001 0,nop,wscale 2> (DF)
> > 11:29:54.983334 10.2.224.182.8700 > 10.2.20.246.33060: S 2770690746:2770690746(0) ack 1972343060 win 33304 <nop,nop,timestamp 99687881 225781001,mss 1460,nop,wscale 1,nop,nop,sackOK> (DF)
>
> Since the TCP Window Scale options are exchanged,
> the window size field contains shifted value except SYNs.

Be careful, tcpdump may be tracking the window scale and reporting
scaled values. Seems unlikely since with a window scale of 2, and odd
window size would be impossible. Also, is there by any chance a busted
firewall in the way (like OpenBSD) that corrupts window scaling.
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html