Thanks Robert and Peter.
Robert wrote:
> You probalby are using an uplink with a MTU lower than 1500.
Peter wrote:
> match in all scrub (no-df max-mss 1440)
>
> the problem went away. tcpdump output of successful and failing
> connetions would be instructive, along with the actual error
> messages, if any.
Setting the maximum segment size to a smaller number seems to have
helped noticeably on my ADSL connection.
What should one look for in the tcpdump output? Here is the tail end of
a timed out connection to a web server.
Regards,
/Lars
17:40:58.051513 upload.esams.wikimedia.org.www > foo.54960: F
1474:1474(0) ack 530 win 14 <nop,nop,timestamp 1674149461
2201021415> (DF)
17:40:58.051988 foo.50486 > upload.esams.wikimedia.org.www: . ack
12226 win 16384 <nop,nop,timestamp 3093236957 1674149461>
17:40:58.052006 foo.54960 > upload.esams.wikimedia.org.www: . ack
1475 win 16384 <nop,nop,timestamp 2201021534 1674149461>
17:41:09.729879 foo.63952 > upload.esams.wikimedia.org.www: F
542:542(0) ack 851 win 16384 <nop,nop,timestamp 507798705
1674149461>
17:41:09.729897 foo.50486 > upload.esams.wikimedia.org.www: F
487:487(0) ack 12226 win 16384 <nop,nop,timestamp 3093236980
1674149461>
17:41:09.729955 foo.54960 > upload.esams.wikimedia.org.www: F
530:530(0) ack 1475 win 16384 <nop,nop,timestamp 2201021557
1674149461>
17:41:09.781579 upload.esams.wikimedia.org.www > foo.63952: . ack
543 win 14 <nop,nop,timestamp 1674150634 507798705> (DF)
17:41:09.783580 upload.esams.wikimedia.org.www > foo.50486: . ack
488 win 14 <nop,nop,timestamp 1674150634 3093236980> (DF)
17:41:09.783596 upload.esams.wikimedia.org.www > foo.54960: . ack
531 win 14 <nop,nop,timestamp 1674150635 2201021557> (DF)
