Hey Everyone..
I was being plagued with seeing ICQ users go on/off line all
the time. Finally, it dawned on me that this might be due to
a MASQ timeout. So, I up'ed the UDP timeout to several hours
and that fixed things. But.. several hours is OVERKILL so
I did a little research.
It seems that the ICQ protocol is pretty inconsistant. I ran a
TCPDUMP last night to see if I could drop the IP MASQ UDP timeout
a bit and this is what I found. See the bottom for the results.
If you too are having ICQ flapping issues, change your IPFWADM or
IPCHAINS timeouts to 10mins or 600 seconds for UDP. That should
be good enough.
--David
Time Source Destination
protocol time diff.
40:04.9 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
44:56.4 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
04:51.5
48:05.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
03:09.3
56:06.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.3
57:56.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:50.0
59:01.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:05.0
04:06.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
05:05.7
12:07.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.8
12:39.3 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:31.8
20:08.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
07:28.7
28:08.3 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.3
32:57.9 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
04:49.7
36:09.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
03:11.1
44:09.8 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.8
52:10.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.9
00:11.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.8
03:55.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
03:44.0
08:11.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
04:16.2
13:43.2 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
05:31.5
15:43.1 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:59.9
15:58.1 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:15.0
16:12.1 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:14.0
24:12.4 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.3
32:02.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
07:50.3
32:12.8 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:10.1
32:45.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:32.9
33:58.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:13.0
39:03.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 24
05:04.8
40:13.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:10.0
45:48.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
05:34.5
48:14.1 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
02:26.0
56:14.3 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.3
04:14.9 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.6
06:06.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
01:51.8
12:15.6 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
06:08.9
15:21.9 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
03:06.3
20:16.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
04:54.1
28:16.2 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.2
36:16.6 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.4
43:55.4 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 24
07:38.8
44:17.2 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
00:21.7
52:17.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.3
00:17.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.2
08:18.2 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.5
16:18.7 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.5
24:19.3 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.6
28:47.8 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
04:28.5
32:19.9 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
03:32.1
40:20.6 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.7
48:21.4 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.8
56:22.1 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.8
04:22.6 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.4
12:23.0 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.4
20:23.5 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 20
08:00.6
20:23.6 trinity2.trinnet.net.64976 > icq.mirabilis.com.4000: udp 44
00:00.1
20:24.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 64
00:00.8
20:29.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:05.2
20:30.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 61
00:00.3
20:35.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:05.7
21:31.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:56.0
22:12.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:41.0
28:25.1 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
06:12.4
36:25.6 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.4
44:25.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
52:26.6 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.7
00:27.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.7
08:27.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.2
16:27.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
24:28.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
32:28.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
40:29.1 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
48:29.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.4
51:20.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:50.5
56:30.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
05:10.0
01:51.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
05:21.0
04:30.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:39.4
12:30.9 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
20:31.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.8
23:09.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:37.5
28:32.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
05:23.2
36:33.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.6
44:33.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
52:33.9 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
00:34.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
08:34.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
16:35.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
24:35.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
32:36.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.6
40:36.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.7
48:37.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.7
56:38.2 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.8
04:38.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
12:39.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
20:39.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.6
28:40.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
36:40.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
44:40.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
52:41.1 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.4
57:32.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
04:50.9
00:41.6 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
03:09.6
07:18.2 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
06:36.6
08:42.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
01:24.1
11:46.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
03:04.0
16:43.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
04:56.6
16:53.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:10.0
24:43.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
07:50.5
32:43.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.4
40:44.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.2
48:44.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.3
56:45.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.6
04:45.4 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
12:46.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.6
15:26.0 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:40.0
20:46.6 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
05:20.6
28:47.1 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.5
36:47.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:00.7
39:35.3 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:47.5
44:48.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
05:13.2
52:49.5 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
08:01.0
55:21.7 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
02:32.3
57:13.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 24
01:52.1
57:23.8 trinity2.trinnet.net.61209 > icq.mirabilis.com.4000: udp 20
00:10.0
Number of samples: 120
Average interval: 05:35.9
Min Interval: 00:00.1
Max Interval: 08:01.0
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
