On Mon, 24 Feb 2003, Jonathan Lemon wrote: > In LAST_ACK state, the machine should keep retransmitting the FIN > until it gets an ACK from the peer, or the connection times out, > which should take roughly 8 minutes. If the connections stay around > forever, then something is broken.
The one thing all connections had in common was that they were outbound to MSN.com. I believe that to scale their junk software up, everything is behind load-balancers, which can make things interesting if the LB doesn't do things "correctly". > ISTR someone mentioning that things were working as expected in the > latest -stable, which version are you using? This particular box is 4.6.2-p2. Since rebooting with IPFilter in place, I'm not seeing it anymore. So either MSN fixed something or IPFilter is masking the problem (or both). Somewhere in my Google-ing, I found people claiming that LAST_ACK can sit around for days if the other end doesn't respond. If this were less of a harried situation, I would have tcpdumped some traffic to see if we were actually retransmitting the FIN. Got a PR or anything referencing the possible problem? Thanks, Charles > -- > Jonathan > > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message
