Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-21 Thread James Nichols
> Huh? Do you mean a PIX blade in a Cisco switch-router chassis? It > would be very useful if you could be less vague about the > equipment in use. Right it's a PIX blade in Cisco chassis. The PIX is running ASA version 7.0(6) > That depends more on your customers' networking attributes > the

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-20 Thread James Nichols
> But I'd be very surprised if the router is acting as anything more > that a network-layer device. It might perhaps have some soft connection > state being used for generating accounting records. Being Cisco > it's probably a switch-router, so it might carry some per-port hard > state for validat

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-20 Thread James Nichols
> I still dont understand. > > "tcpdump -p -n -s 1600 -c 1" doesnt reveal User data at all. > > Without any exact data from you, I am afraid nobody can help. Oh, I didn't see that you specified specific options. I'll still have to anonymize 2000+ IP addresses, but I think there is an open sou

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-19 Thread James Nichols
> The router could be sooo crappy that it drops all packets from > TCP streams that have SACK enabled and the client has opened > 200+ SACK connections previously... something like that? I don't know, maybe. My router is a fairly new model Cisco and is pretty major (i.e. pretty expensive), so it'

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-19 Thread James Nichols
On 12/19/07, Eric Dumazet <[EMAIL PROTECTED]> wrote: > James Nichols a écrit : > >> So you see outgoing SYN packets, but no SYN replies coming from the remote > >> peer ? (you mention ACKS, but the first packet received from the remote > >> peer should be a

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-19 Thread James Nichols
> > When I stop and start the Java application, all the new outbound > > connections still get stuck in SYN_SENT state. > > Is it so that they don't timeout at all? You can collect some of their > state from /proc/net/tcp (shows at least timers and attempt counters) The outbound connections to

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-19 Thread James Nichols
> So you see outgoing SYN packets, but no SYN replies coming from the remote > peer ? (you mention ACKS, but the first packet received from the remote > peer should be a SYN+ACK), Right, I meant to say SYN+ACK. I don't see them coming back. > When the problem comes, instead of restarting the

Re: After many hours all outbound connections get stuck in SYN_SENT

2007-12-17 Thread James Nichols
136 DSACKs received 4038 connections reset due to unexpected data 557 connections reset due to early user close 319219 connections aborted due to timeout On 12/16/07, James Nichols <[EMAIL PROTECTED]> wrote: > Hello, > > I have a Java application that makes a

After many hours all outbound connections get stuck in SYN_SENT

2007-12-16 Thread James Nichols
the traffic, so please CC me directly on any replies. Thanks, James Nichols -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html