Re: Disabling "TCP Treason uncloaked"

[Herbert Xu <herbert@gondor.apana.org.au>]

On Wed, May 03, 2006 at 01:49:05PM +0100, Just Marc wrote:
>
> You're right, actually this box serves http/ftp file transfers only, 
> it's a mirror with a large amount of downloads a day.

That's interesting.  The RX bug that I fixed earlier would usually
manifest itself under exactly these conditions.  Alas you're running
a fixed kernel.

> I gave it another look, many of the prints are repeat prints for the 
> same remote IPs,

Can you take a tcpdump of the TCP sessions involving those IPs and
then show me the sections that occur when those messages are triggered?

> I agree, however, I think it's pretty good to allow an admin to toggle 
> it off completely.  Maybe that's all we need, really.

The question is always what you want to be off and what to leave on.
After all, you can turn off all printk's to the console through /proc.
If you also tell klogd to ignore them then you won't see anything at
all (unless you run dmesg).

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt