Skip to contentSkip to conversation

How to debug very strange packet delivery problem?

DISCUSSION Manfred Spraul 2 participants 2 messages Jan 4, 2002 – Jan 5, 2002

lore
Share & tools
lore
#0 lore raw
Quoted 3 lines

- watched the packets leave from the source machine with tcpdump on the outbound interface, and the packets arrive intact at the problem machine with tcpdump on the ppp interface

Have you dumped the complete packet on both ends, and checked that it arrives really unchanged? (except the IP checksum and the ttl). IIRC the option should be -x -s 1500

Perhaps some traffic shaper/firewall corrupts incomming SYN packets?

--
Manfred

#1 lore raw

Hadn't gone that far yet, no. Luckily at this time the machines are actually located in the same office, so this shouldn't be too hard to do. Once the problem machine is relocated to 30+ miles away, it would be a bit more difficult :-)

----- Original Message -----
From: "Manfred Spraul" <[email protected]>
To: ""Kevin P. Fleming"" <[email protected]>
Cc: <[email protected]>
Sent: Friday, January 04, 2002 4:17 PM
Subject: Re: How to debug very strange packet delivery problem?

Quoted 16 lines
Quoted 3 lines

- watched the packets leave from the source machine with tcpdump on the outbound interface, and the packets arrive intact at the problem machine with tcpdump on the ppp interface

Have you dumped the complete packet on both ends, and checked that it arrives really unchanged? (except the IP checksum and the ttl). IIRC the option should be -x -s 1500

Perhaps some traffic shaper/firewall corrupts incomming SYN packets?

--
Manfred