On Sat, 21 Aug 1999, John Dalbec wrote:
> I finally got a FIN packet showing up in the output.
> 21:01:52.930921 199.190.116.159.4190 > 209.81.8.242.http: F 854084334:854084334(0)
>ack 3932797143 win 32120
> The local address is from a previous ppp connection.
> The "Trigger" lines from this session follow.
> Aug 21 20:47:35 linus diald[349]: Trigger: tcp 199.190.116.159/4192
>209.81.8.242/80
> Aug 21 20:51:22 linus diald[349]: Trigger: tcp 199.190.116.159/4193
>209.81.8.242/80
> Aug 21 20:55:22 linus diald[349]: Trigger: tcp 199.190.116.159/4193
>209.81.8.242/80
> Aug 21 21:01:52 linus diald[349]: Trigger: tcp 199.190.116.159/4190
>209.81.8.242/80
This is a bug in all versions of Netscape AFAIK. It often leaves
connections open. When you quit Netscape the connections are closed which
involves sending this FIN. If you add the following to standard.filter
just before the 'accept tcp 120 tcp.dest=tcp.www' line then diald will
ignore this FIN:
ignore tcp !tcp.live,tcp.dest=tcp.www
ignore tcp !tcp.live,tcp.source=tcp.www
> Aug 21 21:04:42 linus diald[349]: Trigger: tcp 152.2.254.81/21
>199.190.116.159/4178
That's ftp.
--
Tim
Quidquid latine dictum sit, altum viditur.
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
