Re: nfs_getpages: error 70

2004-04-04 Thread Eugene Grosbein
Andrey Alekseyev wrote: > > > I've applied both patches (and defined Z_NFS_EXTENSIONS). > > It does not help. How do I handle it? > > Did you set open_retry_stale sysctl to 1? It does not help too. Moreover, httpd childs sometimes die with SIGSEGV now. Eugene Grosbein __

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Brandon Erhart
Chuck, That worked perfectly :) Thank you all so much for your help. I'm sure I'll be back with more questions during the course of this project! Brandon At 04:46 PM 4/4/2004, you wrote: Brandon Erhart wrote: I want to explicitly get it out of those states, without any help from the other end

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Chuck Swiger
Brandon Erhart wrote: I want to explicitly get it out of those states, without any help from the other end. What must I modify to achieve this? See tcp_usrclosed() in /usr/src/sys/netinet/tcp_usrreq.c. Replace that code with something like (untested): tp->t_state = TCPS_CLOSED; tp = tcp_c

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Mike Silbersack
On Sun, 4 Apr 2004, Brandon Erhart wrote: > Hello everyone, > > I am writing a network application that mirrors a given website (such as a > suped-up "wget"). I use a lot of FDs, and was getting connect() errors when > I would run out of local_ip:local_port tuples. I lowered the MSL so that > TIM

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Brandon Erhart
I want to explicitly get it out of those states, without any help from the other end. What must I modify to achieve this? Brandon At 04:26 PM 4/4/2004, you wrote: Brandon Erhart wrote: [ ... ] Any advice on the timeouts? I don't really care about the RFC , honestly :-P. Like I said, I'm going f

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Chuck Swiger
Brandon Erhart wrote: [ ... ] Any advice on the timeouts? I don't really care about the RFC , honestly :-P. Like I said, I'm going for sheer speed. My advice was to read the RFC as it contains significant discussion about these timeouts, but you're free to disregard it if you please. In particul

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Brandon Erhart
Yes, it pays attention to /robots.txt. But, I am writing my own -- I don't want to use rsync, wget, anything like that. This is part of an archiving project, and it uses so many FDs because it has tons of connections opened to DIFFERENT servers at different times .. not just one site. Any advi

Re: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Chuck Swiger
Brandon Erhart wrote: I am writing a network application that mirrors a given website (such as a suped-up "wget"). I use a lot of FDs, and was getting connect() errors when I would run out of local_ip:local_port tuples. I lowered the MSL so that TIME_WAIT would timeout very quick (yes, I know, t

RE: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Brandon Erhart
Don, I have lowered the MSL .. please note what I said in my original post. This seems to have no effect on FIN_WAIT_[1,2] nor LAST_ACK. At 03:54 PM 4/4/2004, you wrote: From: Brandon Erhart [mailto:[EMAIL PROTECTED] > Hello everyone, > > I am writing a network application that mirrors a given >

RE: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Don Bowman
From: Brandon Erhart [mailto:[EMAIL PROTECTED] > Hello everyone, > > I am writing a network application that mirrors a given > website (such as a > suped-up "wget"). I use a lot of FDs, and was getting > connect() errors when > I would run out of local_ip:local_port tuples. I lowered the > MS

FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Brandon Erhart
Hello everyone, I am writing a network application that mirrors a given website (such as a suped-up "wget"). I use a lot of FDs, and was getting connect() errors when I would run out of local_ip:local_port tuples. I lowered the MSL so that TIME_WAIT would timeout very quick (yes, I know, this i

Re: Fwd: [IPv4 fragmentation --> The Rose Attack]

2004-04-04 Thread Mike Silbersack
On Sun, 4 Apr 2004, Barney Wolff wrote: > On Sun, Apr 04, 2004 at 08:38:31PM +0100, Richard Wendland wrote: > > > > It would be possible to improve matters somewhat by having per-protocol > > limits. So for TCP, which with MSS and DF rarely fragments, there could > > be low limits. But for UDP

Re: Fwd: [IPv4 fragmentation --> The Rose Attack]

2004-04-04 Thread Barney Wolff
On Sun, Apr 04, 2004 at 08:38:31PM +0100, Richard Wendland wrote: > > It would be possible to improve matters somewhat by having per-protocol > limits. So for TCP, which with MSS and DF rarely fragments, there could > be low limits. But for UDP (eg for NFS) which frequently fragments, > there co

Re: Fwd: [IPv4 fragmentation --> The Rose Attack]

2004-04-04 Thread Richard Wendland
> We have the following sysctl's to withstand such an attack: > > net.inet.ip.maxfragpackets [800] > net.inet.ip.maxfragsperpacket [16] > Of course, when the maxfragpackets limit is reached by malicous > packets we are unable to process legitimate fragmented IP packets > until the malicous one

Re: mpd and pptpclient

2004-04-04 Thread Michael Bretterklieber
Hi, On Sat, 3 Apr 2004, Omer Faruk Sen wrote: > > I am trying to use pptpclient but on my mpd server when I try to send > package (such as pinging mpd server) I get those errors on the mpd server. I > have no idea why can that be... Any comments? > > ptp1] rec'd unexpected protocol 0x00b1 on link