Jonathan Ben Avraham wrote:
Hi Shachar,
No ideas, but I see a similar problem at a client of mine with SSL support. What version of Apache are you running and what modules are you using?
- yba
Hmm, things get weirder.
I see a large number of connections in "SYN_RECEIVED" state. In fact, all port 80 connections are in this state. Running a sniffer reveals that a SYN is received, a SYN+ACK sent. Then an ACK is received (the sniffer is running on the server, so this is not a question of network routes or something), followed by the request. The server, however, does not pass this packet through. The connection stays in "SYN_REC", and the request is not acknowledged. I even see the request retransmitted.
This does not appear to be an iptables issue. I've placed a "dport 80 accept" rule as the first one in the INPUT chain, to no avail. This is something wrong with the kernel. It did remind me of the problem Ira mentioned a while back, though. In his case, however, the web site remained up and responding, not so here.
The kernel is a specially compiled one (not by me) to support some weird IBM xSeries SCSI setup. I have not managed to see if I can replace it with a vanilla kernel.
If anyone can glean more from this added info, please let me know. It seems, with Ira, Jonathan and myself, that this is a more common problem than we might think.
Shachar
-- Shachar Shemesh Lingnu Open Source Consulting ltd. http://www.lingnu.com/
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
