Re: SYNCOOKIE authentication problems

From: Steve Kargl <sgk_at_troutmask.apl.washington.edu>
Date: Thu, 28 Jun 2007 08:12:15 -0700
On Thu, Jun 28, 2007 at 02:50:40PM +0400, Eygene Ryabinkin wrote:
> Steve, good day.
> 
> Wed, Jun 27, 2007 at 06:43:11PM -0700, Steve Kargl wrote:
> > Any advice on how to isolate or avoid?
> > 
> > Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to 
> > [192.168.0.11]:63266 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> > SYNCOOKIE authentication, segment rejected (probably spoofed)
> 
> According to Andre Oppermann, these are harmless:
>     http://lists.freebsd.org/pipermail/freebsd-net/2007-June/014401.html
> 
> But I am expiriencing some problems related to the other messages
> like 'tcp_input: Listen socket: Spurious RST, segment rejected'.
> Though it seems not to be your case, but my problems are documented
> in the aforementioned thread.  Just in case you're curious...
> -- 

Andre certainly knows more about TCP/IP than I, but no, these
are not harmless.  Everytime one of these messages appears 
on the console, my MPI application hangs and must be restarted.
My large numerical simulations randomly die anywhere from
15 minutes to 25 hours after launching the job.

-- 
Steve
Received on Thu Jun 28 2007 - 13:13:05 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:13 UTC