Where to find Solaris slow-IP patches [was Re: PPP slow between Linux and Solaris - why is it so?]

Miquel van Smoorenburg (ulmo@q.net)
Wed, 17 Jul 1996 22:28:45 -0400


> > I remember someone mentioned that Solaris was retransmitting packets too
> > quickly or something causing >50% of bandwidth to be used up by duplicate
> > packets. I got the impression that Solaris was to blame. Is this
> > correct? In any case, I do not remember anyone ever mentioning a fix /
> > trick / work around to get the throughput back up to what it should be.
>
> We had a mix of Linux problems (fixed for 2.0.x) and some Solaris bugs. Sun
> engineers posted a summary of the Sun bugs and allegedly a patch is out. It
> seems however that nobody can get hold of said patch yet.
>
> Alan

Ouch. This bit me.

To get them for SunOS 5.4:

for i in 101945-41 101959-07 101973-16 102042-05 102044-01 102066-09 102070-01 102165-02 102216-07 102218-03 102277-02 102664-01 102680-03 102704-02 102711-01 102756-01 102769-03 102922-03 103070-01 101878-13 102292-02; do
lynx -source -dump http://access1.sun.com/patches/patch.recommended/patch.bin/${i}.tar.Z >$i.tar.Z </dev/null &
done

(it's 29M, the relevent patch is 7764992B (7M) long.)

Check these URLs to see if the list should be updated:

http://access1.sun.com/cgi-bin/rpatch2html?README.101945-41 <------- the relevent patch for 2.4
http://access1.sun.com/recpatches/2.4.html <--- all public 2.4 patches
http://access1.sun.com/recpatches/rec.html <--- all public solaris patches (i.e. for 2.5, etc.)

[ Why did I post this to Linux group? Because it may solve many Linux
problems and so we can better diagnose the *real* Linux problems ]

Update to my poor TCP performance problem: I've confirmed that the
problem persists between me (2.0.7, PPP2.2.0f) & the unpatched SunOS
5.4, and that the problem does not exist between me & SunOS 4.1.4,
can't tell with IRIX 6.2 IP19 (the freezes are much shorter in length
- around 15 seconds), SCO_SV 3.2 is ok, and now I'm having trouble
reproducing it with another Linux 2.0.7. Hold the presses! I just
reproduced it with another 2.0.7. Actual freezes. This isn't
just a slowdown. This is a freeze, like I'm having with the Solaris.

Ahhh, after 45 seconds of nearly NO network activity on my PPP link,
suddenly some older data in my queue to the other Linux got sent and
processed (that command finished its output and gave another prompt),
but my queue is sitting with data waiting for another, what, minute?:

tcp 0 269 130.250.17.17:1756 205.187.62.100:23 ESTABLISHED

Ok, it froze for two minutes with no other network activity.

Here's the tcpdump for the last 10 seconds of freeze -- note that
205.187.62.100 doesn't even APPEAR until about ten seconds into the
tcpdump, indicating that the remote end just had gone to bed and
ignored me for some time, not really even caring what happens -- and
it took my side sending it another packet to get things rolling again.

22:10:06.497463 news1.panix.com.nntp > 130.250.17.17.1857: S 1982528001:1982528001(0) ack 860758857 win 16384 <mss 512>
22:10:06.497463 130.250.17.17.1857 > news1.panix.com.nntp: . ack 1 win 31744
22:10:07.597681 193.8.230.2.7831 > 130.250.17.67.2076: . ack 1212786353 win 61440
22:10:07.937681 130.250.17.53.ntp > 205.187.62.101.ntp: v3 sym_pas strat 4 poll 10 prec -15 (encap)
22:10:09.228036 130.250.17.17.1860 > 204.75.164.1.www: S 1416384993:1416384993(0) win 512 <mss 1460>
22:10:09.568108 204.75.164.1.www > 130.250.17.17.1860: S 4016461859:4016461859(0) ack 1416384994 win 14335 <mss 512>
22:10:09.568108 130.250.17.17.1860 > 204.75.164.1.www: . ack 1 win 31744
22:10:09.658108 130.250.17.17.1860 > 204.75.164.1.www: P 1:439(438) ack 1 win 31744 (DF)
22:10:10.408318 204.75.164.1.www > 130.250.17.17.1860: . ack 439 win 13971
22:10:10.918318 204.75.164.1.1887 > 130.250.17.17.auth: S 4017836694:4017836694(0) win 512 <mss 512>
22:10:10.918318 130.250.17.17.auth > 204.75.164.1.1887: S 531120344:531120344(0) ack 4017836695 win 31744 <mss 512>
22:10:11.238463 204.75.164.1.1887 > 130.250.17.17.auth: . ack 1 win 14261
22:10:11.248468 204.75.164.1.1887 > 130.250.17.17.auth: P 1:10(9) ack 1 win 14335
22:10:11.268478 130.250.17.17.auth > 204.75.164.1.1887: . ack 10 win 31744
22:10:11.888525 130.250.17.17.1860 > 204.75.164.1.www: F 439:439(0) ack 1 win 31744
22:10:12.058580 130.250.17.17.auth > 204.75.164.1.1887: P 1:35(34) ack 10 win 31744 (DF)
22:10:12.088595 130.250.17.17.auth > 204.75.164.1.1887: F 35:35(0) ack 10 win 31744
22:10:12.178640 204.75.164.1.www > 130.250.17.17.1860: . ack 440 win 13971
22:10:12.508730 204.75.164.1.1887 > 130.250.17.17.auth: . ack 35 win 14301
22:10:12.538730 204.75.164.1.1887 > 130.250.17.17.auth: F 10:10(0) ack 35 win 14335
22:10:12.538730 130.250.17.17.auth > 204.75.164.1.1887: . ack 11 win 31744
22:10:13.048780 204.75.164.1.www > 130.250.17.17.1860: . 1:513(512) ack 440 win 14335
22:10:13.048780 130.250.17.17.1860 > 204.75.164.1.www: R 1416385433:1416385433(0) win 0
22:10:13.068790 204.75.164.1.1887 > 130.250.17.17.auth: . ack 36 win 14334
22:10:13.278895 news1.panix.com.nntp > 130.250.17.17.1857: P 1:48(47) ack 1 win 16384
22:10:13.278895 130.250.17.17.1857 > news1.panix.com.nntp: P 1:14(13) ack 48 win 31744 (DF)
22:10:13.338925 news1.panix.com.nntp > 130.250.17.17.1857: F 48:48(0) ack 1 win 16384
22:10:13.338925 130.250.17.17.1857 > news1.panix.com.nntp: . ack 49 win 31744
22:10:13.368933 130.250.17.17.1857 > news1.panix.com.nntp: F 14:14(0) ack 49 win 31744
22:10:13.608933 204.75.164.1.www > 130.250.17.17.1860: . 1:513(512) ack 440 win 14335
22:10:13.608933 130.250.17.17.1860 > 204.75.164.1.www: R 1416385433:1416385433(0) win 0
22:10:13.738933 news1.panix.com.nntp > 130.250.17.17.1857: R 1982528049:1982528049(0) win 0
22:10:13.758933 news1.panix.com.nntp > 130.250.17.17.1857: R 1982528050:1982528050(0) win 16384
22:10:13.778933 news1.panix.com.nntp > 130.250.17.17.1857: R 1982528050:1982528050(0) win 16384
22:10:14.519133 204.75.164.1.www > 130.250.17.17.1860: . 1:513(512) ack 440 win 14335
22:10:14.519133 130.250.17.17.1860 > 204.75.164.1.www: R 1416385433:1416385433(0) win 0
22:10:17.799720 130.250.17.17.1756 > 205.187.62.100.telnet: P 2745303757:2745303804(47) ack 1669116947 win 31744 (DF)
22:10:18.249870 205.187.62.100.telnet > 130.250.17.17.1756: . ack 199 win 31744
22:10:18.249870 130.250.17.17.1756 > 205.187.62.100.telnet: P 199:228(29) ack 1 win 31744 (DF)
22:10:18.249870 130.250.17.17.1756 > 205.187.62.100.telnet: P 228:234(6) ack 1 win 31744 (DF)
22:10:18.379911 205.187.62.100.telnet > 130.250.17.17.1756: P 1:204(203) ack 199 win 31744 (DF)
22:10:18.399911 130.250.17.17.1756 > 205.187.62.100.telnet: . ack 204 win 31744
22:10:18.429911 news1.panix.com.domain > 130.250.17.17.domain: 671 (44)
22:10:18.569911 130.250.17.17.domain > 198.7.0.1.domain: 43307+ (40)
22:10:18.569911 130.250.17.17.domain > news1.panix.com.domain: 671* 1/4/3 (242)
22:10:18.739911 205.187.62.100.telnet > 130.250.17.17.1756: P 1:204(203) ack 228 win 31744 (DF)
22:10:18.739911 130.250.17.17.1756 > 205.187.62.100.telnet: P 234:269(35) ack 204 win 31744 (DF)
22:10:18.739911 130.250.17.17.1756 > 205.187.62.100.telnet: . ack 204 win 31744
22:10:18.939911 130.250.17.17.ntp > 137.39.156.241.ntp: v3 client strat 4 poll 8 prec -15
22:10:19.059966 198.7.0.1.domain > 130.250.17.17.domain: 43307 0/0/0 (40)
22:10:19.280076 205.187.62.100.telnet > 130.250.17.17.1756: . ack 269 win 31744
22:10:19.280076 130.250.17.17.1756 > 205.187.62.100.telnet: P 269:279(10) ack 204 win 31744 (DF)
22:10:19.380100 137.39.156.241.ntp > 130.250.17.17.ntp: v3 server strat 3 poll 8 prec -19 [tos 0xc0]
22:10:19.600100 205.187.62.100.telnet > 130.250.17.17.1756: . ack 279 win 31744
22:10:20.820287 205.187.62.100.telnet > 130.250.17.17.1756: P 567:948(381) ack 279 win 31744 (DF)
22:10:20.820287 130.250.17.17.1756 > 205.187.62.100.telnet: . ack 204 win 31744
22:10:24.941014 130.250.17.17.ntp > 128.32.125.146.ntp: v3 client strat 4 poll 9 prec -15
22:10:24.941014 130.250.17.17.ntp > rocky.dialup.access.net.ntp: v3 client strat 4 poll 9 prec -15
22:10:24.941014 130.250.17.17.ntp > 205.187.62.100.ntp: v3 sym_act strat 4 poll 9 prec -15
22:10:25.451190 xenyn-eid-E1.nyc.access.net > 130.250.17.17: icmp: host rocky.dialup.access.net unreachable
22:10:25.521190 205.187.62.100 > 130.250.17.17: icmp: 205.187.62.100 udp port ntp unreachable [tos 0x6]
22:10:25.551190 128.32.125.146 > 130.250.17.17: icmp: 128.32.125.146 udp port ntp unreachable
22:10:27.961543 news1.panix.com.1741 > Q.Net.nntp: S 1985856001:1985856001(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 29010 0>
22:10:27.961543 Q.Net.nntp > news1.panix.com.1741: S 353989351:353989351(0) ack 1985856002 win 31744 <mss 1460>
22:10:28.271698 news1.panix.com.1741 > Q.Net.nntp: . ack 1 win 17520
22:10:30.942045 130.250.17.17.ntp > 163.179.19.51.ntp: v3 client strat 4 poll 8 prec -15
22:10:31.362211 163.179.19.51.ntp > 130.250.17.17.ntp: v3 server strat 3 poll 8 prec -19
22:10:35.962861 Q.Net.nntp > news1.panix.com.1741: P 1:62(61) ack 1 win 31744 (DF)
22:10:36.313012 news1.panix.com.1741 > Q.Net.nntp: . ack 62 win 17520
22:10:36.353012 news1.panix.com.1741 > Q.Net.nntp: P 1:14(13) ack 62 win 17520
22:10:36.353012 Q.Net.nntp > news1.panix.com.1741: P 62:77(15) ack 14 win 31731 (DF)
22:10:36.923012 130.250.17.17.1767 > 192.48.96.125.nntp: P 2150244415:2150244457(42) ack 1714051533 win 31744 (DF)
22:10:36.953012 130.250.17.17.1647 > 206.26.118.3.nntp: P 4018640905:4018640944(39) ack 2497904520 win 31744 (DF)
22:10:37.283168 news1.panix.com.1741 > Q.Net.nntp: . ack 77 win 17505
22:10:37.423168 130.250.17.17.1868 > news1.panix.com.nntp: S 1488272709:1488272709(0) win 512 <mss 1460>
22:10:37.553168 206.26.118.3.nntp > 130.250.17.17.1647: P 1:6(5) ack 39 win 24576
22:10:37.573168 130.250.17.17.1647 > 206.26.118.3.nntp: . ack 6 win 31744
22:10:37.683168 news1.panix.com.nntp > 130.250.17.17.1868: S 1987200001:1987200001(0) ack 1488272710 win 16384 <mss 512>
22:10:37.683168 130.250.17.17.1868 > news1.panix.com.nntp: . ack 1 win 31744
22:10:37.953168 news1.panix.com.1741 > Q.Net.nntp: P 14:236(222) ack 77 win 17520
22:10:37.973178 Q.Net.nntp > news1.panix.com.1741: . ack 236 win 31509
22:10:38.153268 Q.Net.nntp > news1.panix.com.1741: P 77:117(40) ack 236 win 31509 (DF)
22:10:38.443321 news1.panix.com.1741 > Q.Net.nntp: . ack 117 win 17520
22:10:38.443321 Q.Net.nntp > news1.panix.com.1741: P 117:173(56) ack 236 win 31509 (DF)
22:10:38.803321 news1.panix.com.1741 > Q.Net.nntp: P 236:835(599) ack 117 win 17520
22:10:38.813321 news1.panix.com.1741 > Q.Net.nntp: . ack 173 win 17520
22:10:38.823321 Q.Net.nntp > news1.panix.com.1741: . ack 835 win 30910
22:10:39.143416 Q.Net.nntp > news1.panix.com.1741: P 173:213(40) ack 835 win 30910 (DF)
22:10:39.693473 news1.panix.com.1741 > Q.Net.nntp: P 835:2024(1189) ack 173 win 17520
22:10:39.703473 news1.panix.com.1741 > Q.Net.nntp: . ack 213 win 17520
22:10:39.703473 Q.Net.nntp > news1.panix.com.1741: P 213:253(40) ack 2024 win 29721 (DF)
22:10:39.763473 news1.panix.com.nntp > 130.250.17.17.1868: P 1:48(47) ack 1 win 16384
22:10:39.763473 130.250.17.17.1868 > news1.panix.com.nntp: F 1:1(0) ack 48 win 31744
22:10:39.783473 130.250.17.17.1868 > news1.panix.com.nntp: . ack 48 win 31744
22:10:39.823473 news1.panix.com.nntp > 130.250.17.17.1868: F 48:48(0) ack 1 win 16384
22:10:39.823473 130.250.17.17.1868 > news1.panix.com.nntp: . ack 49 win 31744
22:10:39.873473 130.250.17.17.1767 > 192.48.96.125.nntp: P 0:42(42) ack 1 win 31744 (DF)
22:10:40.183588 192.48.96.125.nntp > 130.250.17.17.1767: P 1:16(15) ack 42 win 49012
22:10:40.203598 130.250.17.17.1767 > 192.48.96.125.nntp: . ack 16 win 31744
22:10:40.203598 130.250.17.17.1767 > 192.48.96.125.nntp: P 42:81(39) ack 16 win 31744 (DF)
22:10:40.763624 news1.panix.com.1741 > Q.Net.nntp: P 2024:3145(1121) ack 253 win 17480
22:10:40.763624 Q.Net.nntp > news1.panix.com.1741: P 253:289(36) ack 2024 win 29721 (DF)
22:10:40.783624 Q.Net.nntp > news1.panix.com.1741: . ack 3145 win 28600
22:10:40.813624 news1.panix.com.nntp > 130.250.17.17.1868: F 48:48(0) ack 2 win 16384
22:10:40.813624 130.250.17.17.1868 > news1.panix.com.nntp: . ack 49 win 31744
22:10:40.813624 192.48.96.125.nntp > 130.250.17.17.1767: . ack 42 win 49012
22:10:40.843624 192.48.96.125.nntp > 130.250.17.17.1767: P 16:31(15) ack 81 win 48973
22:10:40.843624 130.250.17.17.1767 > 192.48.96.125.nntp: P 81:148(67) ack 31 win 31744 (DF)
22:10:41.723773 news1.panix.com.1741 > Q.Net.nntp: P 3145:4322(1177) ack 289 win 17520
22:10:41.743773 Q.Net.nntp > news1.panix.com.1741: . ack 4322 win 27423
22:10:42.403921 news1.panix.com.1741 > Q.Net.nntp: . 4322:5782(1460) ack 289 win 17520
22:10:42.903921 Q.Net.nntp > news1.panix.com.1741: . ack 5782 win 25963
22:10:43.194041 news1.panix.com.1741 > Q.Net.nntp: . 5782:7242(1460) ack 289 win 17520
22:10:43.264067 Q.Net.nntp > news1.panix.com.1741: P 289:329(40) ack 7242 win 24503 (DF)
22:10:43.364067 130.250.17.17.1767 > 192.48.96.125.nntp: P 81:148(67) ack 31 win 31744 (DF)
22:10:43.654067 130.250.17.17.1647 > 206.26.118.3.nntp: . 39:551(512) ack 6 win 31744 (DF)
22:10:44.034107 news1.panix.com.1741 > Q.Net.nntp: . 7242:8702(1460) ack 289 win 17520
22:10:44.534211 Q.Net.nntp > news1.panix.com.1741: . ack 8702 win 23043
22:10:44.584211 Q.Net.nntp > news1.panix.com.1741: P 329:385(56) ack 8702 win 23043 (DF)
22:10:44.724211 news1.panix.com.1741 > Q.Net.nntp: . 8702:10162(1460) ack 289 win 17520
22:10:44.724211 Q.Net.nntp > news1.panix.com.1741: P 289:329(40) ack 8702 win 23043 (DF)
22:10:45.224346 Q.Net.nntp > news1.panix.com.1741: . ack 10162 win 21583
22:10:45.354354 news1.panix.com.1741 > Q.Net.nntp: . 10162:11622(1460) ack 289 win 17520
22:10:45.364354 192.48.96.125.nntp > 130.250.17.17.1767: . ack 148 win 48906
22:10:45.374354 192.48.96.125.nntp > 130.250.17.17.1767: P 31:46(15) ack 148 win 48906
22:10:45.374354 130.250.17.17.1767 > 192.48.96.125.nntp: P 148:190(42) ack 46 win 31744 (DF)
22:10:45.854354 Q.Net.nntp > news1.panix.com.1741: . ack 11622 win 20123
22:10:45.994374 news1.panix.com.1741 > Q.Net.nntp: . 11622:13082(1460) ack 289 win 17520
22:10:46.494496 Q.Net.nntp > news1.panix.com.1741: . ack 13082 win 18663
22:10:46.574496 news1.panix.com.1741 > Q.Net.nntp: . 13082:14542(1460) ack 289 win 17520
22:10:46.914496 130.250.17.17.1647 > 206.26.118.3.nntp: . 39:551(512) ack 6 win 31744 (DF)
22:10:47.074556 Q.Net.nntp > news1.panix.com.1741: . ack 14542 win 17203
22:10:47.134586 Q.Net.nntp > news1.panix.com.1741: P 289:329(40) ack 14542 win 17203 (DF)
22:10:47.444636 news1.panix.com.1741 > Q.Net.nntp: . 14542:16002(1460) ack 289 win 17520
22:10:47.944636 Q.Net.nntp > news1.panix.com.1741: . ack 16002 win 15743
22:10:48.134726 news1.panix.com.1741 > Q.Net.nntp: . 16002:17462(1460) ack 289 win 17520
22:10:48.314775 205.187.62.100.telnet > 130.250.17.17.1756: P 204:567(363) ack 279 win 31744 (DF)
22:10:48.334775 130.250.17.17.1756 > 205.187.62.100.telnet: . ack 948 win 31744
22:10:48.354775 192.48.96.125.nntp > 130.250.17.17.1767: P 31:46(15) ack 148 win 48906
22:10:48.354775 130.250.17.17.1767 > 192.48.96.125.nntp: . ack 46 win 31744
22:10:48.484775 news1.panix.com.1741 > Q.Net.nntp: P 17462:17689(227) ack 329 win 17480
22:10:48.484775 Q.Net.nntp > news1.panix.com.1741: P 329:

Let me try to reproduce again ...

Frozen at 22:13:49 until 22:14:13 (duration 25 seconds)

interesting output (simultaneous tcpdump & session):

*TCPDUMP* 22:14:14.168921 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 758:1057(299) ack 105 win 31744 (DF)
*TCPDUMP* 22:14:14.188921 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 1057 win 31744
*TCPDUMP* 22:14:14.538921 news1.panix.com.nntp > Q.Net.1879: P 1:48(47) ack 1 win 16384
*TCPDUMP* 22:14:14.538921 Q.Net.1879 > news1.panix.com.nntp: F 1:1(0) ack 48 win 31744
*TCPDUMP* 22:14:14.558921 Q.Net.1879 > news1.panix.com.nntp: . ack 48 win 31744
*TCPDUMP* 22:14:14.578921 news1.panix.com.nntp > Q.Net.1879: F 48:48(0) ack 1 win 16384
*TCPDUMP* 22:14:14.578921 Q.Net.1879 > news1.panix.com.nntp: . ack 49 win 31744
*TCPDUMP* 22:14:14.798921 news1.panix.com.nntp > Q.Net.1879: F 48:48(0) ack 2 win 16384
*TCPDUMP* 22:14:14.798921 Q.Net.1879 > news1.panix.com.nntp: . ack 49 win 31744
*TCPDUMP* 22:14:17.859094 bnt.WhatsWhat.com.ntp > Q.Net.ntp: v3 sym_act strat 4 poll 9 prec -7
*TCPDUMP* 22:14:23.709438 news-in3.UU.NET.nntp > Q.Net.1767: P 131:146(15) ack 3908 win 31508
*TCPDUMP* 22:14:23.709438 Q.Net.1767 > news-in3.UU.NET.nntp: P 3908:3947(39) ack 146 win 31744 (DF)
*TCPDUMP* 22:14:30.049814 ns.ionet.net.domain > Q.Net.domain: 50199+ (45) (DF)
*TCPDUMP* 22:14:30.079829 Q.Net.domain > ns.ionet.net.domain: 50199* 1/4/4 (206)
*TCPDUMP* 22:14:30.229836 Q.Net.1767 > news-in3.UU.NET.nntp: P 3908:3947(39) ack 146 win 31744 (DF)
*TCPDUMP* 22:14:30.919836 news-in3.UU.NET.nntp > Q.Net.1767: . ack 3947 win 31469
*TCPDUMP* 22:14:31.079886 news-in3.UU.NET.nntp > Q.Net.1767: P 146:161(15) ack 3947 win 31469
*TCPDUMP* 22:14:31.079886 Q.Net.1767 > news-in3.UU.NET.nntp: P 3947:3986(39) ack 161 win 31744 (DF)
*TCPDUMP* 22:14:31.359892 news-in3.UU.NET.nntp > Q.Net.1767: P 161:176(15) ack 3986 win 31430
*TCPDUMP* 22:14:31.359892 Q.Net.1767 > news-in3.UU.NET.nntp: P 3986:4028(42) ack 176 win 31744 (DF)
*TCPDUMP* 22:14:31.719892 news-in3.UU.NET.nntp > Q.Net.1767: P 176:181(5) ack 4028 win 31388
*TCPDUMP* 22:14:31.739892 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 181 win 31744
*TCPDUMP* 22:14:35.310118 Q.Net.1767 > news-in3.UU.NET.nntp: . 4028:4564(536) ack 181 win 31744 (DF)
*TCPDUMP* 22:14:35.310118 Q.Net.1767 > news-in3.UU.NET.nntp: P 4564:5100(536) ack 181 win 31744 (DF)
*TCPDUMP* 22:14:36.920174 news-in3.UU.NET.nntp > Q.Net.1767: . ack 5100 win 30316
*TCPDUMP* 22:14:36.920174 Q.Net.1767 > news-in3.UU.NET.nntp: P 5100:5458(358) ack 181 win 31744 (DF)
*TCPDUMP* 22:14:37.730230 news-in3.UU.NET.nntp > Q.Net.1767: . ack 5458 win 29958
*TCPDUMP* 22:14:37.950230 news-in3.UU.NET.nntp > Q.Net.1767: P 181:186(5) ack 5458 win 29958
*TCPDUMP* 22:14:37.950230 Q.Net.1767 > news-in3.UU.NET.nntp: P 5458:5500(42) ack 186 win 31744 (DF)
*TCPDUMP* 22:14:38.310286 news-in3.UU.NET.nntp > Q.Net.1767: P 186:191(5) ack 5500 win 29916
*TCPDUMP* 22:14:38.330286 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 191 win 31744
*TCPDUMP* 22:14:38.360286 Q.Net.1767 > news-in3.UU.NET.nntp: . 5500:6036(536) ack 191 win 31744 (DF)
*TCPDUMP* 22:14:38.360286 Q.Net.1767 > news-in3.UU.NET.nntp: P 6036:6572(536) ack 191 win 31744 (DF)
*TCPDUMP* 22:14:39.360342 Q.Net.1767 > news-in3.UU.NET.nntp: P 6572:6974(402) ack 191 win 31744 (DF)
*TCPDUMP* 22:14:39.440342 news-in3.UU.NET.nntp > Q.Net.1767: . ack 6036 win 29380
*TCPDUMP* 22:14:39.990347 news-in3.UU.NET.nntp > Q.Net.1767: . ack 6974 win 28442
*TCPDUMP* 22:14:39.990347 news-in3.UU.NET.nntp > Q.Net.1767: P 191:196(5) ack 6974 win 28442
*TCPDUMP* 22:14:39.990347 Q.Net.1767 > news-in3.UU.NET.nntp: P 6974:7011(37) ack 196 win 31744 (DF)
*TCPDUMP* 22:14:40.330398 news-in3.UU.NET.nntp > Q.Net.1767: . ack 7011 win 28405
*TCPDUMP* 22:14:40.740398 news-in3.UU.NET.nntp > Q.Net.1767: P 196:211(15) ack 7011 win 28405
*TCPDUMP* 22:14:40.740398 Q.Net.1767 > news-in3.UU.NET.nntp: P 7011:7062(51) ack 211 win 31744 (DF)
*TCPDUMP* 22:14:41.130454 news-in3.UU.NET.nntp > Q.Net.1767: . ack 7062 win 28354
*TCPDUMP* 22:14:41.440454 news-in3.UU.NET.nntp > Q.Net.1767: P 211:216(5) ack 7062 win 28354
*TCPDUMP* 22:14:41.460454 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 216 win 31744
*TCPDUMP* 22:14:41.660454 Q.Net.1767 > news-in3.UU.NET.nntp: . 7062:7598(536) ack 216 win 31744 (DF)
*TCPDUMP* 22:14:41.670454 Q.Net.1767 > news-in3.UU.NET.nntp: P 7598:8134(536) ack 216 win 31744 (DF)
*TCPDUMP* 22:14:41.670454 Q.Net.1767 > news-in3.UU.NET.nntp: . 8134:8670(536) ack 216 win 31744 (DF)
*TCPDUMP* 22:14:42.670510 Q.Net.1767 > news-in3.UU.NET.nntp: P 8670:9013(343) ack 216 win 31744 (DF)
*TCPDUMP* 22:14:42.830510 news-in3.UU.NET.nntp > Q.Net.1767: . ack 7598 win 27818
*TCPDUMP* 22:14:42.960510 news-in3.UU.NET.nntp > Q.Net.1767: . ack 8134 win 27282
*TCPDUMP* 22:14:43.360566 news-in3.UU.NET.nntp > Q.Net.1767: . ack 9013 win 26403
*TCPDUMP* 22:14:44.940622 news-in3.UU.NET.nntp > Q.Net.1767: P 216:221(5) ack 9013 win 26403
*TCPDUMP* 22:14:44.940622 Q.Net.1767 > news-in3.UU.NET.nntp: P 9013:9058(45) ack 221 win 31744 (DF)
*TCPDUMP* 22:14:45.360677 news-in3.UU.NET.nntp > Q.Net.1767: . ack 9058 win 26358
*TCPDUMP* 22:14:45.390677 news-in3.UU.NET.nntp > Q.Net.1767: P 221:236(15) ack 9058 win 26358
*TCPDUMP* 22:14:45.390677 Q.Net.1767 > news-in3.UU.NET.nntp: P 9058:9093(35) ack 236 win 31744 (DF)
*TCPDUMP* 22:14:45.700677 news-in3.UU.NET.nntp > Q.Net.1767: P 236:241(5) ack 9093 win 26323
*TCPDUMP* 22:14:45.700677 Q.Net.1767 > news-in3.UU.NET.nntp: . 9093:9629(536) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:45.710677 Q.Net.1767 > news-in3.UU.NET.nntp: P 9629:10165(536) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:45.710677 Q.Net.1767 > news-in3.UU.NET.nntp: . 10165:10701(536) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:45.710677 Q.Net.1767 > news-in3.UU.NET.nntp: P 10701:11237(536) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:46.710733 Q.Net.1767 > news-in3.UU.NET.nntp: P 11237:11298(61) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:46.800733 news-in3.UU.NET.nntp > Q.Net.1767: . ack 9629 win 25787
*TCPDUMP* 22:14:47.260789 news-in3.UU.NET.nntp > Q.Net.1767: . ack 10165 win 25251
*TCPDUMP* 22:14:47.390789 news-in3.UU.NET.nntp > Q.Net.1767: . ack 10701 win 24715
*TCPDUMP* 22:14:47.650789 news-in3.UU.NET.nntp > Q.Net.1767: . ack 10701 win 24715
*TCPDUMP* 22:14:50.080950 Q.Net.1767 > news-in3.UU.NET.nntp: P 10701:11237(536) ack 241 win 31744 (DF)
*TCPDUMP* 22:14:50.780955 news-in3.UU.NET.nntp > Q.Net.1767: . ack 11298 win 24118
*TCPDUMP* 22:14:50.840955 news-in3.UU.NET.nntp > Q.Net.1767: P 241:246(5) ack 11298 win 24576
*TCPDUMP* 22:14:50.840955 Q.Net.1767 > news-in3.UU.NET.nntp: P 11298:11340(42) ack 246 win 31744 (DF)
*TCPDUMP* 22:14:51.161011 news-in3.UU.NET.nntp > Q.Net.1767: P 246:251(5) ack 11340 win 24576
*TCPDUMP* 22:14:51.181011 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 251 win 31744
*TCPDUMP* 22:14:51.181011 Q.Net.1767 > news-in3.UU.NET.nntp: . 11340:11876(536) ack 251 win 31744 (DF)
*TCPDUMP* 22:14:51.181011 Q.Net.1767 > news-in3.UU.NET.nntp: P 11876:12412(536) ack 251 win 31744 (DF)
*TCPDUMP* 22:14:52.181066 Q.Net.1767 > news-in3.UU.NET.nntp: P 12412:12915(503) ack 251 win 31744 (DF)
*TCPDUMP* 22:14:52.181066 news-in3.UU.NET.nntp > Q.Net.1767: . ack 11876 win 24040
*TCPDUMP* 22:14:52.761066 news-in3.UU.NET.nntp > Q.Net.1767: . ack 12412 win 24576
*TCPDUMP* 22:14:52.961066 news-in3.UU.NET.nntp > Q.Net.1767: . ack 12915 win 24576
*TCPDUMP* 22:14:52.981066 news-in3.UU.NET.nntp > Q.Net.1767: P 251:256(5) ack 12915 win 24576
*TCPDUMP* 22:14:52.981066 Q.Net.1767 > news-in3.UU.NET.nntp: P 12915:12950(35) ack 256 win 31744 (DF)
*TCPDUMP* 22:14:53.381121 news-in3.UU.NET.nntp > Q.Net.1767: . ack 12950 win 24576
*TCPDUMP* 22:14:55.211232 news-in3.UU.NET.nntp > Q.Net.1767: P 256:261(5) ack 12950 win 24576
*TCPDUMP* 22:14:55.231232 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 261 win 31744
*TCPDUMP* 22:14:55.231232 Q.Net.1767 > news-in3.UU.NET.nntp: . 12950:13486(536) ack 261 win 31744 (DF)
*TCPDUMP* 22:14:55.231232 Q.Net.1767 > news-in3.UU.NET.nntp: P 13486:14022(536) ack 261 win 31744 (DF)
*TCPDUMP* 22:14:55.231232 Q.Net.1767 > news-in3.UU.NET.nntp: . 14022:14558(536) ack 261 win 31744 (DF)
*TCPDUMP* 22:14:56.231287 Q.Net.1767 > news-in3.UU.NET.nntp: P 14558:14959(401) ack 261 win 31744 (DF)
*TCPDUMP* 22:14:56.231287 news-in3.UU.NET.nntp > Q.Net.1767: . ack 13486 win 24040
*TCPDUMP* 22:14:56.971287 news-in3.UU.NET.nntp > Q.Net.1767: . ack 14558 win 24576
*TCPDUMP* 22:14:56.971287 Q.Net.ntp > tbua.nerc-bangor.ac.uk.ntp: v3 client strat 4 poll 10 prec -15
*TCPDUMP* 22:14:57.171342 news-in3.UU.NET.nntp > Q.Net.1767: P 261:266(5) ack 14959 win 24576
*TCPDUMP* 22:14:57.171342 Q.Net.1767 > news-in3.UU.NET.nntp: P 14959:15002(43) ack 266 win 31744 (DF)
*TCPDUMP* 22:14:57.441342 mace.netdoor.com.domain > Q.Net.domain: 34365+ (46) (DF)
*TCPDUMP* 22:14:57.441342 Q.Net.domain > mace.netdoor.com.domain: 34365* 1/4/4 (207)
*TCPDUMP* 22:14:57.581342 tbua.nerc-bangor.ac.uk.ntp > Q.Net.ntp: v3 server strat 4 poll 10 prec -18 (DF)
*TCPDUMP* 22:14:57.591342 news-in3.UU.NET.nntp > Q.Net.1767: P 266:271(5) ack 15002 win 24576
*TCPDUMP* 22:14:57.611342 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 271 win 31744
*TCPDUMP* 22:14:57.691342 Q.Net.1767 > news-in3.UU.NET.nntp: . 15002:15538(536) ack 271 win 31744 (DF)
*TCPDUMP* 22:14:57.691342 Q.Net.1767 > news-in3.UU.NET.nntp: P 15538:16074(536) ack 271 win 31744 (DF)
*TCPDUMP* 22:14:57.691342 Q.Net.1767 > news-in3.UU.NET.nntp: . 16074:16610(536) ack 271 win 31744 (DF)
*TCPDUMP* 22:14:57.691342 Q.Net.1767 > news-in3.UU.NET.nntp: P 16610:17146(536) ack 271 win 31744 (DF)
*TCPDUMP* 22:14:58.671397 news-in3.UU.NET.nntp > Q.Net.1767: . ack 15538 win 24576
*TCPDUMP* 22:14:58.671397 Q.Net.1767 > news-in3.UU.NET.nntp: . 17146:17682(536) ack 271 win 31744
*TCPDUMP* 22:14:58.671397 Q.Net.1767 > news-in3.UU.NET.nntp: P 17682:18218(536) ack 271 win 31744
*TCPDUMP* 22:14:59.271453 news-in3.UU.NET.nntp > Q.Net.1767: . ack 16610 win 24576
*TCPDUMP* 22:14:59.271453 Q.Net.1767 > news-in3.UU.NET.nntp: . 18218:18754(536) ack 271 win 31744
*TCPDUMP* 22:14:59.271453 Q.Net.1767 > news-in3.UU.NET.nntp: P 18754:19290(536) ack 271 win 31744
*TCPDUMP* 22:14:59.801453 news-in3.UU.NET.nntp > Q.Net.1767: . ack 17146 win 24040
*TCPDUMP* 22:14:59.801453 Q.Net.1767 > news-in3.UU.NET.nntp: . 19290:19826(536) ack 271 win 31744
*TCPDUMP* 22:14:59.851453 news-in3.UU.NET.nntp > Q.Net.1767: . ack 17682 win 24040
*TCPDUMP* 22:14:59.851453 Q.Net.1767 > news-in3.UU.NET.nntp: P 19826:20362(536) ack 271 win 31744
*TCPDUMP* 22:15:00.281508 news-in3.UU.NET.nntp > Q.Net.1767: . ack 18218 win 24576
*TCPDUMP* 22:15:00.281508 Q.Net.1767 > news-in3.UU.NET.nntp: . 20362:20898(536) ack 271 win 31744
*TCPDUMP* 22:15:00.601508 news-in3.UU.NET.nntp > Q.Net.1767: . ack 18754 win 24576
*TCPDUMP* 22:15:00.601508 Q.Net.1767 > news-in3.UU.NET.nntp: P 20898:21434(536) ack 271 win 31744
*TCPDUMP* 22:15:00.851508 news-in3.UU.NET.nntp > Q.Net.1767: . ack 19290 win 24576
*TCPDUMP* 22:15:00.851508 Q.Net.1767 > news-in3.UU.NET.nntp: . 21434:21970(536) ack 271 win 31744
*TCPDUMP* 22:15:00.851508 Q.Net.1767 > news-in3.UU.NET.nntp: P 21970:22506(536) ack 271 win 31744
*TCPDUMP* 22:15:01.261563 news-in3.UU.NET.nntp > Q.Net.1767: . ack 19826 win 24576
*TCPDUMP* 22:15:01.261563 Q.Net.1767 > news-in3.UU.NET.nntp: . 22506:23042(536) ack 271 win 31744
*TCPDUMP* 22:15:01.491563 news-in3.UU.NET.nntp > Q.Net.1767: . ack 20362 win 24040
*TCPDUMP* 22:15:01.491563 Q.Net.1767 > news-in3.UU.NET.nntp: P 23042:23578(536) ack 271 win 31744
*TCPDUMP* 22:15:01.881563 news-in3.UU.NET.nntp > Q.Net.1767: . ack 20898 win 23504
*TCPDUMP* 22:15:01.881563 Q.Net.1767 > news-in3.UU.NET.nntp: . 23578:24114(536) ack 271 win 31744
*TCPDUMP* 22:15:02.031588 news-in3.UU.NET.nntp > Q.Net.1767: . ack 21434 win 24576
*TCPDUMP* 22:15:02.031588 Q.Net.1767 > news-in3.UU.NET.nntp: P 24114:24650(536) ack 271 win 31744
*TCPDUMP* 22:15:02.581618 news-in3.UU.NET.nntp > Q.Net.1767: . ack 22506 win 23504
*TCPDUMP* 22:15:02.581618 Q.Net.1767 > news-in3.UU.NET.nntp: . 24650:25186(536) ack 271 win 31744
*TCPDUMP* 22:15:02.581618 Q.Net.1767 > news-in3.UU.NET.nntp: P 25186:25722(536) ack 271 win 31744
*TCPDUMP* 22:15:02.691618 news-in3.UU.NET.nntp > Q.Net.1767: . ack 22506 win 24576
*TCPDUMP* 22:15:03.101673 bnt.WhatsWhat.com.ntp > Q.Net.ntp: v3 sym_pas strat 4 poll 7 prec -7 (encap)
*TCPDUMP* 22:15:03.101673 bnt.WhatsWhat.com.ntp > Q.Net.ntp: v3 sym_pas strat 4 poll 7 prec -7 (encap)
*TCPDUMP* 22:15:03.111673 news-in3.UU.NET.nntp > Q.Net.1767: . ack 23578 win 24576
*TCPDUMP* 22:15:03.111673 Q.Net.1767 > news-in3.UU.NET.nntp: . 25722:26258(536) ack 271 win 31744
*TCPDUMP* 22:15:03.111673 Q.Net.1767 > news-in3.UU.NET.nntp: P 26258:26794(536) ack 271 win 31744
*TCPDUMP* 22:15:03.451673 news-in3.UU.NET.nntp > Q.Net.1767: . ack 24114 win 24576
*TCPDUMP* 22:15:03.451673 Q.Net.1767 > news-in3.UU.NET.nntp: P 26794:27330(536) ack 271 win 31744
*TCPDUMP* 22:15:03.451673 Q.Net.1767 > news-in3.UU.NET.nntp: . 27330:27866(536) ack 271 win 31744
*TCPDUMP* 22:15:03.611673 news-in3.UU.NET.nntp > Q.Net.1767: . ack 24650 win 24040
*TCPDUMP* 22:15:03.611673 Q.Net.1767 > news-in3.UU.NET.nntp: P 27866:28402(536) ack 271 win 31744
*TCPDUMP* 22:15:04.041703 news-in3.UU.NET.nntp > Q.Net.1767: . ack 25186 win 23504
*TCPDUMP* 22:15:04.041703 Q.Net.1767 > news-in3.UU.NET.nntp: . 28402:28938(536) ack 271 win 31744
*TCPDUMP* 22:15:04.101727 news-in3.UU.NET.nntp > Q.Net.1767: . ack 25722 win 22968
*TCPDUMP* 22:15:04.101727 Q.Net.1767 > news-in3.UU.NET.nntp: P 28938:29162(224) ack 271 win 31744 (DF)
*TCPDUMP* 22:15:04.191727 news-in3.UU.NET.nntp > Q.Net.1767: . ack 26258 win 22432
*TCPDUMP* 22:15:04.661727 news-in3.UU.NET.nntp > Q.Net.1767: . ack 26794 win 24576
*TCPDUMP* 22:15:04.851727 news-in3.UU.NET.nntp > Q.Net.1767: . ack 27330 win 24576
*TCPDUMP* 22:15:05.191782 news-in3.UU.NET.nntp > Q.Net.1767: . ack 27866 win 24576
*TCPDUMP* 22:15:05.401782 news-in3.UU.NET.nntp > Q.Net.1767: . ack 28402 win 24576
*TCPDUMP* 22:15:05.601782 news-in3.UU.NET.nntp > Q.Net.1767: . ack 29162 win 24576
*TCPDUMP* 22:15:05.611782 news-in3.UU.NET.nntp > Q.Net.1767: P 271:276(5) ack 29162 win 24576
*TCPDUMP* 22:15:05.611782 Q.Net.1767 > news-in3.UU.NET.nntp: P 29162:29193(31) ack 276 win 31744 (DF)
*TCPDUMP* 22:15:05.991787 news-in3.UU.NET.nntp > Q.Net.1767: . ack 29193 win 24545
*TCPDUMP* 22:15:06.051817 news-in3.UU.NET.nntp > Q.Net.1767: P 276:281(5) ack 29193 win 24576
*TCPDUMP* 22:15:06.061822 Q.Net.1767 > news-in3.UU.NET.nntp: . 29193:29729(536) ack 281 win 31744 (DF)
*TCPDUMP* 22:15:06.991842 news-in3.UU.NET.nntp > Q.Net.1767: . ack 29729 win 24576
*TCPDUMP* 22:15:06.991842 Q.Net.1767 > news-in3.UU.NET.nntp: P 29729:30256(527) ack 281 win 31744 (DF)
*TCPDUMP* 22:15:07.861892 news-in3.UU.NET.nntp > Q.Net.1767: P 281:286(5) ack 30256 win 24576
*TCPDUMP* 22:15:07.861892 Q.Net.1767 > news-in3.UU.NET.nntp: P 30256:30290(34) ack 286 win 31744 (DF)
*TCPDUMP* 22:15:10.752056 news-in3.UU.NET.nntp > Q.Net.1767: P 286:291(5) ack 30290 win 24576
*TCPDUMP* 22:15:10.772056 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 291 win 31744
*TCPDUMP* 22:15:10.932056 Q.Net.1767 > news-in3.UU.NET.nntp: . 30290:30826(536) ack 291 win 31744 (DF)
*TCPDUMP* 22:15:10.932056 Q.Net.1767 > news-in3.UU.NET.nntp: P 30826:31362(536) ack 291 win 31744 (DF)
*TCPDUMP* 22:15:10.932056 Q.Net.1767 > news-in3.UU.NET.nntp: . 31362:31898(536) ack 291 win 31744 (DF)
*TCPDUMP* 22:15:11.932111 Q.Net.1767 > news-in3.UU.NET.nntp: P 31898:31972(74) ack 291 win 31744 (DF)
*TCPDUMP* 22:15:12.392165 news-in3.UU.NET.nntp > Q.Net.1767: . ack 31362 win 24576
*TCPDUMP* 22:15:12.952165 news-in3.UU.NET.nntp > Q.Net.1767: . ack 31898 win 24040
*TCPDUMP* 22:15:12.982165 news-in3.UU.NET.nntp > Q.Net.1767: . ack 31972 win 23966
*TCPDUMP* 22:15:14.052255 news-in3.UU.NET.nntp > Q.Net.1767: P 291:296(5) ack 31972 win 24576
*TCPDUMP* 22:15:14.052255 Q.Net.1767 > news-in3.UU.NET.nntp: P 31972:32006(34) ack 296 win 31744 (DF)
*TCPDUMP* 22:15:15.442329 news-in3.UU.NET.nntp > Q.Net.1767: P 296:301(5) ack 32006 win 24576
*TCPDUMP* 22:15:15.462329 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 301 win 31744
*TCPDUMP* 22:15:15.462329 Q.Net.1767 > news-in3.UU.NET.nntp: . 32006:32542(536) ack 301 win 31744 (DF)
*TCPDUMP* 22:15:15.462329 Q.Net.1767 > news-in3.UU.NET.nntp: P 32542:33078(536) ack 301 win 31744 (DF)
*TCPDUMP* 22:15:15.462329 Q.Net.1767 > news-in3.UU.NET.nntp: . 33078:33614(536) ack 301 win 31744 (DF)
*TCPDUMP* 22:15:16.462383 Q.Net.1767 > news-in3.UU.NET.nntp: P 33614:33877(263) ack 301 win 31744 (DF)
*TCPDUMP* 22:15:16.832383 news-in3.UU.NET.nntp > Q.Net.1767: . ack 33078 win 23504
*TCPDUMP* 22:15:17.272438 news-in3.UU.NET.nntp > Q.Net.1767: . ack 33614 win 22968
*TCPDUMP* 22:15:17.272438 news-in3.UU.NET.nntp > Q.Net.1767: . ack 33614 win 24576
*TCPDUMP* 22:15:17.522438 news-in3.UU.NET.nntp > Q.Net.1767: P 301:306(5) ack 33877 win 24576
*TCPDUMP* 22:15:17.522438 Q.Net.1767 > news-in3.UU.NET.nntp: P 33877:33923(46) ack 306 win 31744 (DF)
*TCPDUMP* 22:15:17.942438 news-in3.UU.NET.nntp > Q.Net.1767: P 306:311(5) ack 33923 win 24576
*TCPDUMP* 22:15:17.962438 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 311 win 31744
*TCPDUMP* 22:15:17.962438 Q.Net.1767 > news-in3.UU.NET.nntp: . 33923:34459(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:17.962438 Q.Net.1767 > news-in3.UU.NET.nntp: P 34459:34995(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:17.962438 Q.Net.1767 > news-in3.UU.NET.nntp: . 34995:35531(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:17.972438 Q.Net.1767 > news-in3.UU.NET.nntp: P 35531:36067(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:17.972438 Q.Net.1767 > news-in3.UU.NET.nntp: . 36067:36603(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:17.972438 Q.Net.1767 > news-in3.UU.NET.nntp: P 36603:37139(536) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:18.972492 Q.Net.1767 > news-in3.UU.NET.nntp: P 37139:37314(175) ack 311 win 31744 (DF)
*TCPDUMP* 22:15:19.272546 news-in3.UU.NET.nntp > Q.Net.1767: . ack 34995 win 24040
*TCPDUMP* 22:15:19.772546 news-in3.UU.NET.nntp > Q.Net.1767: . ack 35531 win 24576
*TCPDUMP* 22:15:20.222601 news-in3.UU.NET.nntp > Q.Net.1767: . ack 36067 win 24576
*TCPDUMP* 22:15:20.432601 news-in3.UU.NET.nntp > Q.Net.1767: . ack 36603 win 24576
*TCPDUMP* 22:15:20.742601 news-in3.UU.NET.nntp > Q.Net.1767: . ack 37139 win 24040
*TCPDUMP* 22:15:20.752601 news-in3.UU.NET.nntp > Q.Net.1767: P 311:316(5) ack 37314 win 24576
*TCPDUMP* 22:15:20.752601 Q.Net.1767 > news-in3.UU.NET.nntp: P 37314:37365(51) ack 316 win 31744 (DF)
*TCPDUMP* 22:15:23.202764 news-in3.UU.NET.nntp > Q.Net.1767: P 316:321(5) ack 37365 win 24576
*TCPDUMP* 22:15:23.222764 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 321 win 31744
*TCPDUMP* 22:15:23.702764 Q.Net.1767 > news-in3.UU.NET.nntp: . 37365:37901(536) ack 321 win 31744 (DF)
*TCPDUMP* 22:15:23.702764 Q.Net.1767 > news-in3.UU.NET.nntp: P 37901:38437(536) ack 321 win 31744 (DF)
*TCPDUMP* 22:15:23.702764 Q.Net.1767 > news-in3.UU.NET.nntp: . 38437:38973(536) ack 321 win 31744 (DF)
*TCPDUMP* 22:15:24.672818 news-in3.UU.NET.nntp > Q.Net.1767: . ack 37901 win 24040
*TCPDUMP* 22:15:24.702818 Q.Net.1767 > news-in3.UU.NET.nntp: P 38973:39377(404) ack 321 win 31744 (DF)
*TCPDUMP* 22:15:25.092872 news-in3.UU.NET.nntp > Q.Net.1767: . ack 38437 win 23504
*TCPDUMP* 22:15:25.102872 news-in3.UU.NET.nntp > Q.Net.1767: . ack 38437 win 24576
*TCPDUMP* 22:15:25.192872 news-in3.UU.NET.nntp > Q.Net.1767: . ack 38973 win 24040
*TCPDUMP* 22:15:29.253089 Q.Net.1767 > news-in3.UU.NET.nntp: P 38973:39377(404) ack 321 win 31744 (DF)
*TCPDUMP* 22:15:29.963089 news-in3.UU.NET.nntp > Q.Net.1767: . ack 39377 win 24576
*TCPDUMP* 22:15:30.283143 news-in3.UU.NET.nntp > Q.Net.1767: P 321:369(48) ack 39377 win 24576
*TCPDUMP* 22:15:30.283143 Q.Net.1767 > news-in3.UU.NET.nntp: P 39377:39417(40) ack 369 win 31744 (DF)
*TCPDUMP* 22:15:34.973359 Q.Net.ntp > tsunami.apple.com.ntp: v3 client strat 4 poll 8 prec -15
*TCPDUMP* 22:15:35.843413 tsunami.apple.com.ntp > Q.Net.ntp: v3 server strat 3 poll 8 prec -19
*TCPDUMP* 22:15:36.973467 Q.Net.ntp > tks.oulu.fi.ntp: v3 client strat 4 poll 8 prec -15
*TCPDUMP* 22:15:39.383628 Q.Net.1767 > news-in3.UU.NET.nntp: P 39377:39417(40) ack 369 win 31744 (DF)
*TCPDUMP* 22:15:39.903628 tks.oulu.fi.ntp > Q.Net.ntp: v3 server strat 4 poll 8 prec -17 (DF)
*TCPDUMP* 22:15:39.973628 news-in3.UU.NET.nntp > Q.Net.1767: P 369:374(5) ack 39417 win 24576
*TCPDUMP* 22:15:39.993633 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 374 win 31744
*TCPDUMP* 22:15:40.333682 Q.Net.1767 > news-in3.UU.NET.nntp: . 39417:39953(536) ack 374 win 31744 (DF)
*TCPDUMP* 22:15:41.333736 Q.Net.1767 > news-in3.UU.NET.nntp: P 39953:40413(460) ack 374 win 31744 (DF)
*TCPDUMP* 22:15:41.483736 news-in3.UU.NET.nntp > Q.Net.1767: . ack 39953 win 24576
*TCPDUMP* 22:15:42.163790 news-in3.UU.NET.nntp > Q.Net.1767: . ack 40413 win 24116
*TCPDUMP* 22:15:42.163790 news-in3.UU.NET.nntp > Q.Net.1767: P 374:379(5) ack 40413 win 24576
*TCPDUMP* 22:15:42.163790 Q.Net.1767 > news-in3.UU.NET.nntp: P 40413:40448(35) ack 379 win 31744 (DF)
*TCPDUMP* 22:15:42.383790 jura.fourmilab.ch.7841 > Q.Net.2076: S 323776000:323776000(0) win 61440 <mss 512>
*TCPDUMP* 22:15:42.383790 Q.Net.2076 > jura.fourmilab.ch.7841: R 0:0(0) ack 323776001 win 0
*TCPDUMP* 22:15:42.843790 205.187.124.0 > 122.199.62.111: ip-proto-0 24 [ttl 0] (encap)
*TCPDUMP* 22:15:45.393951 news-in3.UU.NET.nntp > Q.Net.1767: P 379:384(5) ack 40448 win 24576
*TCPDUMP* 22:15:45.413951 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 384 win 31744
*TCPDUMP* 22:15:45.413951 Q.Net.1767 > news-in3.UU.NET.nntp: . 40448:40984(536) ack 384 win 31744 (DF)
*TCPDUMP* 22:15:45.413951 Q.Net.1767 > news-in3.UU.NET.nntp: P 40984:41520(536) ack 384 win 31744 (DF)
*TCPDUMP* 22:15:46.414005 Q.Net.1767 > news-in3.UU.NET.nntp: P 41520:41831(311) ack 384 win 31744 (DF)
*TCPDUMP* 22:15:46.514005 news-in3.UU.NET.nntp > Q.Net.1767: . ack 40984 win 24040
*TCPDUMP* 22:15:46.854005 news-in3.UU.NET.nntp > Q.Net.1767: . ack 41520 win 24040
*TCPDUMP* 22:15:47.044035 news-in3.UU.NET.nntp > Q.Net.1767: . ack 41831 win 23729
*TCPDUMP* 22:15:47.354058 news-in3.UU.NET.nntp > Q.Net.1767: P 384:389(5) ack 41831 win 24576
*TCPDUMP* 22:15:47.354058 Q.Net.1767 > news-in3.UU.NET.nntp: P 41831:41866(35) ack 389 win 31744 (DF)
*TCPDUMP* 22:15:47.924058 news-in3.UU.NET.nntp > Q.Net.1767: P 389:404(15) ack 41866 win 24576
*TCPDUMP* 22:15:47.924058 Q.Net.1767 > news-in3.UU.NET.nntp: P 41866:41901(35) ack 404 win 31744 (DF)
*TCPDUMP* 22:15:48.244112 bavard.fourmilab.ch.230.8.193.IN-ADDR.ARPA.34791 > Q.Net.2076: S 3249735936:3249735936(0) win 8760 <mss 1460> (DF)
*TCPDUMP* 22:15:48.244112 Q.Net.2076 > bavard.fourmilab.ch.230.8.193.IN-ADDR.ARPA.34791: R 0:0(0) ack 3249735937 win 0
*TCPDUMP* 22:15:54.114433 Q.Net.1767 > news-in3.UU.NET.nntp: P 41866:41901(35) ack 404 win 31744 (DF)
*TCPDUMP* 22:15:54.454433 news-in3.UU.NET.nntp > Q.Net.1767: . ack 41901 win 24541
*TCPDUMP* 22:15:56.334541 news-in3.UU.NET.nntp > Q.Net.1767: P 404:419(15) ack 41901 win 24576
*TCPDUMP* 22:15:56.334541 Q.Net.1767 > news-in3.UU.NET.nntp: P 41901:41936(35) ack 419 win 31744 (DF)
>>>SESSION>>>[ballen@spanky ballen]$ date
*TCPDUMP* 22:13:39.076826 Q.Net.1767 > news-in3.UU.NET.nntp: P 2150258053:2150258099(46) ack 1714051648 win 31744 (DF)
*TCPDUMP* 22:13:39.496838 news-in3.UU.NET.nntp > Q.Net.1767: . ack 46 win 35370
*TCPDUMP* 22:13:39.766838 news-in3.UU.NET.nntp > Q.Net.1767: P 1:16(15) ack 46 win 35370
*TCPDUMP* 22:13:39.766838 Q.Net.1767 > news-in3.UU.NET.nntp: P 46:97(51) ack 16 win 31744 (DF)
*TCPDUMP* 22:13:40.116899 news-in3.UU.NET.nntp > Q.Net.1767: . ack 97 win 35319
*TCPDUMP* 22:13:40.156899 news-in3.UU.NET.nntp > Q.Net.1767: P 16:31(15) ack 97 win 35319
*TCPDUMP* 22:13:40.156899 Q.Net.1767 > news-in3.UU.NET.nntp: P 97:143(46) ack 31 win 31744 (DF)
*TCPDUMP* 22:13:40.456899 news-in3.UU.NET.nntp > Q.Net.1767: P 31:46(15) ack 143 win 35273
*TCPDUMP* 22:13:40.456899 Q.Net.1767 > news-in3.UU.NET.nntp: P 143:182(39) ack 46 win 31744 (DF)
*TCPDUMP* 22:13:42.837022 205.187.124.0 > 122.199.62.111: ip-proto-0 24 [ttl 0] (encap)
*TCPDUMP* 22:13:43.457083 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 2745304054:2745304055(1) ack 1669118085 win 31744 (DF)
*TCPDUMP* 22:13:43.857083 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 1:32(31) ack 1 win 31744 (DF)
*TCPDUMP* 22:13:43.877083 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 32 win 31744
*TCPDUMP* 22:13:44.277144 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 1:2(1) ack 32 win 31744 (DF)
*TCPDUMP* 22:13:44.587144 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 32:33(1) ack 2 win 31744 (DF)
*TCPDUMP* 22:13:44.587144 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 2:5(3) ack 32 win 31744 (DF)
*TCPDUMP* 22:13:44.607144 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 33 win 31744
*TCPDUMP* 22:13:44.797144 Q.Net.1767 > news-in3.UU.NET.nntp: P 143:182(39) ack 46 win 31744 (DF)
*TCPDUMP* 22:13:44.957144 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 5 win 31744
*TCPDUMP* 22:13:44.957144 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 5:7(2) ack 33 win 31744 (DF)
>>>SESSION>>>Wed Jul 17 22:13:45 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
*TCPDUMP* 22:13:45.137205 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 33:36(3) ack 5 win 31744 (DF)
*TCPDUMP* 22:13:45.147205 news-in3.UU.NET.nntp > Q.Net.1767: . ack 182 win 35234
*TCPDUMP* 22:13:45.157205 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 36 win 31744
*TCPDUMP* 22:13:45.307205 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 7 win 31744
*TCPDUMP* 22:13:45.487205 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 36:92(56) ack 7 win 31744 (DF)
*TCPDUMP* 22:13:45.507205 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 92 win 31744
*TCPDUMP* 22:13:45.817205 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 7:8(1) ack 92 win 31744 (DF)
>>>SESSION>>>Wed Jul 17 22:13:46 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
*TCPDUMP* 22:13:46.127266 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 92:93(1) ack 8 win 31744 (DF)
*TCPDUMP* 22:13:46.127266 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 8:11(3) ack 92 win 31744 (DF)
*TCPDUMP* 22:13:46.147266 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 93 win 31744
*TCPDUMP* 22:13:46.337266 news-in3.UU.NET.nntp > Q.Net.1767: P 46:61(15) ack 182 win 35234
*TCPDUMP* 22:13:46.337266 Q.Net.1767 > news-in3.UU.NET.nntp: P 182:219(37) ack 61 win 31744 (DF)
*TCPDUMP* 22:13:46.487266 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 93:96(3) ack 11 win 31744 (DF)
*TCPDUMP* 22:13:46.487266 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 11:13(2) ack 93 win 31744 (DF)
*TCPDUMP* 22:13:46.507266 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 96 win 31744
*TCPDUMP* 22:13:46.857266 news-in3.UU.NET.nntp > Q.Net.1767: . ack 219 win 35197
*TCPDUMP* 22:13:46.867266 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 96:98(2) ack 13 win 31744 (DF)
*TCPDUMP* 22:13:46.887266 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 98 win 31744
*TCPDUMP* 22:13:46.897266 bavard.fourmilab.ch.230.8.193.IN-ADDR.ARPA.34787 > Q.Net.2076: S 3226087414:3226087414(0) win 8760 <mss 1460> (DF)
*TCPDUMP* 22:13:46.897266 Q.Net.2076 > bavard.fourmilab.ch.230.8.193.IN-ADDR.ARPA.34787: R 0:0(0) ack 3226087415 win 0
*TCPDUMP* 22:13:47.197327 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 13:14(1) ack 98 win 31744 (DF)
*TCPDUMP* 22:13:47.527327 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 98:152(54) ack 13 win 31744 (DF)
*TCPDUMP* 22:13:47.547327 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 152 win 31744
*TCPDUMP* 22:13:47.837327 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 152:153(1) ack 14 win 31744 (DF)
*TCPDUMP* 22:13:47.837327 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 14:19(5) ack 152 win 31744 (DF)
*TCPDUMP* 22:13:47.857327 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 153 win 31744
>>>SESSION>>>Wed Jul 17 22:13:48 EDT 1996
*TCPDUMP* 22:13:48.227387 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 19 win 31744
*TCPDUMP* 22:13:48.377387 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 153:158(5) ack 19 win 31744 (DF)
*TCPDUMP* 22:13:48.397387 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 158 win 31744
*TCPDUMP* 22:13:48.617387 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 19:20(1) ack 158 win 31744 (DF)
*TCPDUMP* 22:13:48.687387 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 158:212(54) ack 19 win 31744 (DF)
*TCPDUMP* 22:13:48.707387 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 212 win 31744
*TCPDUMP* 22:13:48.987392 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 212:213(1) ack 20 win 31744 (DF)
*TCPDUMP* 22:13:48.987392 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 20:25(5) ack 212 win 31744 (DF)
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:49 EDT 1996
*TCPDUMP* 22:13:49.007402 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 213 win 31744
*TCPDUMP* 22:13:49.347448 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 213:218(5) ack 25 win 31744 (DF)
*TCPDUMP* 22:13:49.347448 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 25:27(2) ack 213 win 31744 (DF)
*TCPDUMP* 22:13:49.367448 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 218 win 31744
*TCPDUMP* 22:13:49.707448 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 218:274(56) ack 27 win 31744 (DF)
*TCPDUMP* 22:13:49.707448 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 27:32(5) ack 218 win 31744 (DF)
*TCPDUMP* 22:13:49.727448 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 274 win 31744
*TCPDUMP* 22:13:49.967448 Q.Net.ntp > news1.panix.com.ntp: v3 client strat 4 poll 8 prec -15
>>>SESSION>>>[ballen@spanky ballen]$ <----- FROZE HERE at 22:13:49 until 22:14:13
>>>SESSION>>>date
*TCPDUMP* 22:13:50.367508 news1.panix.com.ntp > Q.Net.ntp: v3 server strat 3 poll 8 prec -18
*TCPDUMP* 22:13:51.157568 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 276:333(57) ack 32 win 31744 (DF)
*TCPDUMP* 22:13:51.157568 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 32:49(17) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:51.157568 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 274 win 31744
*TCPDUMP* 22:13:51.557568 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 49 win 31744
*TCPDUMP* 22:13:51.557568 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 49:53(4) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:51.857568 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 53 win 31744
*TCPDUMP* 22:13:51.857568 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 53:57(4) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:52.117628 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 57 win 31744
*TCPDUMP* 22:13:52.117628 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 57:59(2) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:52.357628 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 59 win 31744
*TCPDUMP* 22:13:52.357628 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 59:63(4) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:53.797688 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 333:634(301) ack 63 win 31744 (DF)
*TCPDUMP* 22:13:53.797688 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 63:73(10) ack 274 win 31744 (DF)
*TCPDUMP* 22:13:53.797688 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 274 win 31744
*TCPDUMP* 22:13:54.137748 spanky.WhatsWhat.com.telnet > Q.Net.1756: . ack 73 win 31744
*TCPDUMP* 22:13:57.707926 news-in3.UU.NET.nntp > Q.Net.1767: P 61:76(15) ack 219 win 35197
*TCPDUMP* 22:13:57.707926 Q.Net.1767 > news-in3.UU.NET.nntp: P 219:256(37) ack 76 win 31744 (DF)
*TCPDUMP* 22:13:57.967926 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 274 win 31744
*TCPDUMP* 22:13:58.057966 news-in3.UU.NET.nntp > Q.Net.1767: P 76:91(15) ack 256 win 35160
*TCPDUMP* 22:13:58.057966 Q.Net.1767 > news-in3.UU.NET.nntp: P 256:314(58) ack 91 win 31744 (DF)
*TCPDUMP* 22:13:58.457986 news-in3.UU.NET.nntp > Q.Net.1767: P 91:96(5) ack 314 win 35102
*TCPDUMP* 22:13:58.467986 Q.Net.1767 > news-in3.UU.NET.nntp: . 314:850(536) ack 96 win 31744 (DF)
*TCPDUMP* 22:13:58.467986 Q.Net.1767 > news-in3.UU.NET.nntp: P 850:1386(536) ack 96 win 31744 (DF)
*TCPDUMP* 22:13:58.467986 Q.Net.1767 > news-in3.UU.NET.nntp: . 1386:1922(536) ack 96 win 31744 (DF)
*TCPDUMP* 22:13:58.967986 bnt.WhatsWhat.com.ntp > Q.Net.ntp: v3 sym_pas strat 4 poll 8 prec -7 (encap)
*TCPDUMP* 22:13:58.967986 bnt.WhatsWhat.com.ntp > Q.Net.ntp: v3 sym_pas strat 4 poll 8 prec -7 (encap)
*TCPDUMP* 22:13:59.538045 news-in3.UU.NET.nntp > Q.Net.1767: . ack 850 win 34566
*TCPDUMP* 22:13:59.538045 Q.Net.1767 > news-in3.UU.NET.nntp: P 1922:2458(536) ack 96 win 31744
*TCPDUMP* 22:13:59.938045 news-in3.UU.NET.nntp > Q.Net.1767: . ack 1386 win 34030
*TCPDUMP* 22:13:59.938045 Q.Net.1767 > news-in3.UU.NET.nntp: . 2458:2994(536) ack 96 win 31744
*TCPDUMP* 22:14:00.378104 news-in3.UU.NET.nntp > Q.Net.1767: . ack 1922 win 33494
*TCPDUMP* 22:14:00.378104 Q.Net.1767 > news-in3.UU.NET.nntp: P 2994:3530(536) ack 96 win 31744
*TCPDUMP* 22:14:00.688104 news-in3.UU.NET.nntp > Q.Net.1767: . ack 2458 win 32958
*TCPDUMP* 22:14:00.688104 Q.Net.1767 > news-in3.UU.NET.nntp: P 3530:3801(271) ack 96 win 31744 (DF)
*TCPDUMP* 22:14:00.898104 news-in3.UU.NET.nntp > Q.Net.1767: . ack 2994 win 32422
*TCPDUMP* 22:14:01.418163 news-in3.UU.NET.nntp > Q.Net.1767: P 96:101(5) ack 3801 win 31615
*TCPDUMP* 22:14:01.438163 Q.Net.1767 > news-in3.UU.NET.nntp: . ack 101 win 31744
*TCPDUMP* 22:14:01.548163 Q.Net.1767 > news-in3.UU.NET.nntp: P 3801:3834(33) ack 101 win 31744 (DF)
*TCPDUMP* 22:14:01.898163 news-in3.UU.NET.nntp > Q.Net.1767: P 101:116(15) ack 3834 win 31582
*TCPDUMP* 22:14:01.898163 Q.Net.1767 > news-in3.UU.NET.nntp: P 3834:3871(37) ack 116 win 31744 (DF)
*TCPDUMP* 22:14:02.388222 news-in3.UU.NET.nntp > Q.Net.1767: P 116:131(15) ack 3871 win 31545
*TCPDUMP* 22:14:02.388222 Q.Net.1767 > news-in3.UU.NET.nntp: P 3871:3908(37) ack 131 win 31744 (DF)
*TCPDUMP* 22:14:05.648398 Q.Net.1767 > news-in3.UU.NET.nntp: P 3871:3908(37) ack 131 win 31744 (DF)
*TCPDUMP* 22:14:06.078448 news-in3.UU.NET.nntp > Q.Net.1767: . ack 3908 win 31508
*TCPDUMP* 22:14:07.678515 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 73:74(1) ack 274 win 31744 (DF)
*TCPDUMP* 22:14:11.418748 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 73:74(1) ack 274 win 31744 (DF)
*TCPDUMP* 22:14:12.898806 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 274:276(2) ack 73 win 31744 (DF)
*TCPDUMP* 22:14:12.918806 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 634 win 31744
*TCPDUMP* 22:14:13.308863 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 634:752(118) ack 74 win 31744 (DF)
*TCPDUMP* 22:14:13.308863 Q.Net.1756 > spanky.WhatsWhat.com.telnet: P 74:105(31) ack 634 win 31744 (DF)
*TCPDUMP* 22:14:13.328863 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 752 win 31744
*TCPDUMP* 22:14:13.368863 Q.Net.1879 > news1.panix.com.nntp: S 2884621978:2884621978(0) win 512 <mss 1460>
*TCPDUMP* 22:14:13.738863 news1.panix.com.nntp > Q.Net.1879: S 2017216001:2017216001(0) ack 2884621979 win 16384 <mss 512>
*TCPDUMP* 22:14:13.738863 Q.Net.1879 > news1.panix.com.nntp: . ack 1 win 31744
*TCPDUMP* 22:14:13.768863 spanky.WhatsWhat.com.telnet > Q.Net.1756: P 752:758(6) ack 105 win 31744 (DF)
*TCPDUMP* 22:14:13.788863 Q.Net.1756 > spanky.WhatsWhat.com.telnet: . ack 758 win 31744
*TCPDUMP* 22:14:13.968863 Q.Net.ntp > bnt.WhatsWhat.com.ntp: v3 sym_act strat 4 poll 8 prec -15 (encap)
>>>SESSION>>>Wed Jul 17 22:13:50 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:51 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:51 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:51 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:52 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:52 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:54 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:13:54 EDT 1996 <----- NOTE THAT these
commands up to here made it
>>>SESSION>>> to other end but not back
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:14:13 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:14:13 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:14:13 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$ date
>>>SESSION>>>Wed Jul 17 22:14:13 EDT 1996
>>>SESSION>>>[ballen@spanky ballen]$

Once again, using a different simultaneous approach:

No, this time I can't reproduce it.

I'll get back to you when I can.