I filed a bug few weeks back. Detalis can be seen at;
I also wrote to kernel / netdev mailing list. That post can be seen here;
What happened was, I had squid on a transparent linux box, which acted as default gateway for a 60 box network.
At random times, squid would suddenly not get connections from LAN clients or squid would not GET the connection attempts from clients.
Nothing would show up in tcpdump output against LAN clients who would try to hit squid normally to browse the internet.
So, the connection from LAN clients was not being registered at any level on the linux box with the mentioned kernel versions. And this happened at random time.
On Sun, Sep 14, 2008 at 1:57 AM, Bastian Blank <email@example.com>
Please show what you mean with "random TCP connection failure". For
example with a dump from tcpdump.
Do you use netfilter/iptables?
Military secrets are the most fleeting of all.
-- Spock, "The Enterprise Incident", stardate 5027.4