tcptrace fix getservbyport, RST with data

From: Daikichi Osuga (osuga@mml.yrp.nttdocomo.co.jp)
Date: 05/31/01

Next message: EXTERN Heid Marco (THORANET; QI/LBS-FR): "Tcptrace install"

Previous message: Wesley Eddy: "Re: question"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Message-ID: <000801c0ea43$f4721700$233315ac@yrp.nttdocomo.co.jp>
From: "Daikichi Osuga" <osuga@mml.yrp.nttdocomo.co.jp>
Subject: tcptrace fix getservbyport, RST with data
Date: Fri, 1 Jun 2001 11:38:34 +0900

Hello

I fixed some bugs.

1. getservbyport needs htons.

2. if RST segment to include data, then don't count it
it is NOT regular TCP byte stream

   If RST segment to include data appear after FIN,
   (ie. it has lager sequence number than FIN)
   "unique_bytes" will be lager than "ttl_stream_length".
   "missed_data" become negative. (very large number in unsigned)

I became aware of it, in case of very short 2MSL timeout configuration.

23:24:02.953179 n00145.1064 > www.http: S 8944850:8944850(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
23:24:02.953694 www.http > n00145.1064: S 340576719:340576719(0) ack 8944851 win 32768 <mss 1460,nop,nop,sackOK> (DF)
23:24:03.480829 n00145.1064 > www.http: . ack 340576720 win 64240 (DF)
23:24:04.123765 n00145.1064 > www.http: P 8944851:8945187(336) ack 340576720 win 64240 (DF)
23:24:04.133403 www.http > n00145.1064: P 340576720:340576860(140) ack 8945187 win 32768 (DF)
23:24:04.133445 www.http > n00145.1064: P 340576860:340578100(1240) ack 8945187 win 32768 (DF)
23:24:04.133463 www.http > n00145.1064: F 340578100:340578100(0) ack 8945187 win 32768 (DF)
23:24:04.707105 n00145.1064 > www.http: . ack 340576860 win 64100 (DF)
23:24:05.041199 n00145.1064 > www.http: . ack 340578101 win 62860 (DF)
23:24:05.172374 n00145.1064 > www.http: F 8945187:8945187(0) ack 340578101 win 62860 (DF) /* client send FIN */
23:24:05.172673 www.http > n00145.1064: . ack 8945188 win 32768 (DF) /* ack for FIN ... drop */
23:24:08.943199 n00145.1064 > www.http: F 8945187:8945187(0) ack 340578101 win 62860 (DF) /* client retransmit FIN */
23:24:08.943581 www.http > n00145.1064: R 340578101:340578107(6) win 0 (DF) /* server already left TIME_WAIT state */

-- Daikichi Osuga

application/octet-stream attachment: patch.dat

Next message: EXTERN Heid Marco (THORANET; QI/LBS-FR): "Tcptrace install"
Previous message: Wesley Eddy: "Re: question"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : 06/01/01 EDT