By chance are you in EC2?

On Feb 24, 2012, at 8:33 AM, Patrik Modesto wrote:

> Hi Jeremy,
> 
> I've seen the page and tried the values but to no help.
> 
> Here goes tcpdump of one failed TCP connection:
> 
> 15:06:20.231421 IP 10.0.18.87.9160 > 10.0.18.87.39396: Flags [P.], seq
> 137891735:137904068, ack 708, win 282, options [nop,nop,TS val
> 4119981636 ecr 4119981636], length 12333
> 15:06:20.231434 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [.], ack
> 137891735, win 24576, options [nop,nop,TS val 4119981636 ecr
> 4119981636], length 0
> 15:06:20.231459 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [.], ack
> 137904068, win 24576, options [nop,nop,TS val 4119981636 ecr
> 4119981636], length 0
> 15:06:20.271128 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [P.], seq
> 708:712, ack 137904068, win 24576, options [nop,nop,TS val 4119981646
> ecr 4119981636], length 4
> 15:06:20.271156 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [P.], seq
> 712:901, ack 137904068, win 24576, options [nop,nop,TS val 4119981646
> ecr 4119981636], length 189
> 15:06:20.271217 IP 10.0.18.87.9160 > 10.0.18.87.39396: Flags [.], ack
> 901, win 290, options [nop,nop,TS val 4119981646 ecr 4119981646],
> length 0
> 15:06:21.450164 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [F.], seq
> 901, ack 137904068, win 24576, options [nop,nop,TS val 4119981941 ecr
> 4119981646], length 0
> 15:06:21.490323 IP 10.0.18.87.9160 > 10.0.18.87.39396: Flags [.], ack
> 902, win 290, options [nop,nop,TS val 4119981951 ecr 4119981941],
> length 0
> 15:06:38.487063 IP 10.0.18.87.9160 > 10.0.18.87.39396: Flags [P.], seq
> 137904068:137904072, ack 902, win 290, options [nop,nop,TS val
> 4119986200 ecr 4119981941], length 4
> 15:06:38.487079 IP 10.0.18.87.39396 > 10.0.18.87.9160: Flags [R], seq
> 1086151357, win 0, length 0
> 
> port 39396 is client, port 9160 is cassandra server. interresting are
> the last four lines. There if FIN from client to cassandra, then
> cassandra reply with ACK, then ACK+PSH and then gets RST and fails. It
> looks like cassandra writes to closed connection.
> 
> Regards,
> P.

Reply via email to