Re: [CentOS] Weird TCP problem

2008-09-05 Thread Gordon Messmer
Stephen Harris wrote: Sounds like the remote server may actually be busy and the number of outstanding connections is reaching the listen() backlog queue, so the remote server isn't doing an accept() and so the three way handshake isn't completing. That thought crossed my mind, too. However,

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Gordon Messmer
Florin Andrei wrote: And you do capture *all* traffic, right? Don't filter out anything. Well, I'm filtering out the ports that are busy (http and https, imap and imaps, and smtp), but I'm testing access to ssh, since the problem appears to be independent of the port. I get the delays on po

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Stephen Harris
On Fri, Sep 05, 2008 at 11:29:22AM -0700, Gordon Messmer wrote: > Florin Andrei wrote: > > > >Maybe it does reply, just on a different interface? Is this a > >multi-homed system? Bonded interfaces? > > There's only one interface with an IP address, and only one route back > to the office. Sound

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Florin Andrei
Gordon Messmer wrote: Florin Andrei wrote: If you were running tcpdump in promiscuous mode, re-run the tests with it non-promiscuous. Just to make sure the SYN is actually received by that system. I ran the test again with "tcpdump -i eth0 -p" and then thinking better of it, with "tcpdump

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Gordon Messmer
Florin Andrei wrote: If you were running tcpdump in promiscuous mode, re-run the tests with it non-promiscuous. Just to make sure the SYN is actually received by that system. I ran the test again with "tcpdump -i eth0 -p" and then thinking better of it, with "tcpdump -i any". In both cases

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Florin Andrei
Gordon Messmer wrote: Florin Andrei wrote: Maybe it does reply, just on a different interface? Is this a multi-homed system? Bonded interfaces? There's only one interface with an IP address, and only one route back to the office. If you were running tcpdump in promiscuous mode, re-run the

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Gordon Messmer
Florin Andrei wrote: Maybe it does reply, just on a different interface? Is this a multi-homed system? Bonded interfaces? There's only one interface with an IP address, and only one route back to the office. ___ CentOS mailing list CentOS@centos.

Re: [CentOS] Weird TCP problem

2008-09-05 Thread Florin Andrei
Gordon Messmer wrote: Both of those appear to indicate that the server in the colo facility is receiving the SYN packets. What possible reasons are there that it would not reply with SYN+ACK? Maybe it does reply, just on a different interface? Is this a multi-homed system? Bonded interfaces?