[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: OOW: IPFilter 4.1.8 and pfil 2.1.6 running on Solaris 8
From:       Darren Reed <darrenr () reed ! wattle ! id ! au>
Date:       2006-01-16 21:26:24
Message-ID: 200601162126.k0GLQOvh001447 () firewall ! reed ! wattle ! id ! au
[Download RAW message or body]

> 12/01/2006 05:43:06.108324 eri0 @0:17 b 123.456.78.16,2049 -> 123.456.78.77,1022 
> PR tcp len 20 48 -AS IN OOW
> . . .
> . . .
> 12/01/2006 09:26:15.479302 eri0 @0:17 b 123.456.78.16,2049 -> 123.456.78.77,1022 
> PR tcp len 20 48 -AS IN OOW

So you are seeing SYN-ACK packets blocked because they are "out of window".

This is something new.  Can you create a snoop file with these in it for me
to see ?

Also, there were are significant changes in 4.1.10 with respect to out of
window packets.

Thanks,
Darren
[prev in list] [next in list] [prev in thread] [next in thread]