From: "Trever L. Adams" <vichu@digitalme.com>
To: kuznet@ms2.inr.ac.ru
Cc: David Lang <david.lang@digitalinsight.COM>,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: ip_conntrack & timing out of connections
Date: 07 Nov 2001 14:41:36 -0500 [thread overview]
Message-ID: <1005162108.1222.1.camel@aurora> (raw)
In-Reply-To: <200111071855.VAA07803@ms2.inr.ac.ru>
In-Reply-To: <200111071855.VAA07803@ms2.inr.ac.ru>
On Wed, 2001-11-07 at 13:55, kuznet@ms2.inr.ac.ru wrote:
> > > From: pcg@goof.com
> ...
> > > linux-2.4.13-ac5 (other versions untested) has this peculiar behaviour: If I
> > > "killall -STOP thttpd", I, of course, still get connection requests which
> > > usually time out:
> > >
> > > tcp 238 0 217.227.148.85:80 213.76.191.129:3120 CLOSE_WAIT
>
> Blatant lie. Such connections cannot timeout. If they do, kernel really
> have fatal bug.
>
Then the kernel (iptables or what not) has a huge fatal bug. I have
seen this happen as well. The firewall then catches all of these 'ACK
FIN' etc. This is getting more rare for me and usually takes a moderate
to heavy load (for link capacity) before it starts happening, but it
does happen.
Trever
next prev parent reply other threads:[~2001-11-07 19:42 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-11-06 11:19 ip_conntrack & timing out of connections Lehmann
2001-11-06 13:07 ` Rasmus Bøg Hansen
2001-11-06 18:39 ` David Lang
2001-11-07 18:55 ` kuznet
2001-11-07 19:41 ` Trever L. Adams [this message]
2001-11-11 22:38 ` Harald Welte
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1005162108.1222.1.camel@aurora \
--to=vichu@digitalme.com \
--cc=david.lang@digitalinsight.COM \
--cc=kuznet@ms2.inr.ac.ru \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.