[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: TCP windows shrinking

This is a fairly common error w/ 2.4.x.   Actually, error is the wrong
word; more like warning.  The only reason you're seeing it is because
TCP_DEBUG is defined.  If it's annoying, you can undefine it in 

On Fri, Apr 06, 2001 at 12:03:40PM -0400, Noah L. Meyerhans wrote:
> This was logged by one of my servers the other day (potato, upgraded
> with the necessary packages to run kernel 2.4.2):
> Mar 31 08:40:48 debian kernel: TCP: peer xxx.xx.xx.xx:41760/20 shrinks
> window 3735214707:8280:3735227987. Bad, what else can I say?
> The IP address, obviously, has been replaced with x's here.  I haven't
> ever seen the message before.  I have heard of some vulnerabilities in
> various firewall code that allows bogus IP header 'offset' fields to be
> used to avoid firewall packet matching rules.  Might this be an attempt
> at something like that?  Might this merely have been a packet that got
> horribly mangled somewhere on the internet, completely unintentionally?
> Any thoughts?
> Thanks.
> noah
> -- 
>  _______________________________________________________
> | Web: http://web.morgul.net/~frodo/
> | PGP Public Key: http://web.morgul.net/~frodo/mail.html 

"... being a Linux user is sort of like living in a house inhabited
by a large family of carpenters and architects. Every morning when
you wake up, the house is a little different. Maybe there is a new
turret, or some walls have moved. Or perhaps someone has temporarily
removed the floor under your bed." - Unix for Dummies, 2nd Edition
        -- found in the .sig of Rob Riggs, rriggs@tesser.com

Reply to: