TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
41 views

Source ip based Anycast-BGP?

I'm just getting interested in networking so don't be too harsh on me :) Ideal: 2 servers with shared ip; ip X Client 1 pings ip X > always server A Client 2 pings ip X > always server B ...
-1
votes
1answer
51 views

Geo distributed ip [duplicate]

When i ping 8.8.8.8 from my home computer (europe) i get around 26 ms latency. When i ping 8.8.8.8 from a server(US) i get around 1 ms latency. When i ping my (US) server from home (europe) i have 130 ...
0
votes
1answer
278 views

How to trace dropped TCP connections?

Trying to help someone with a situation where TCP connections get mysteriously dropped after a few minutes for no apparent reason (this happens even with non idle connections). Both client and server ...
0
votes
0answers
184 views

HAProxy RTMP (TCP) load balancing

I am using HAProxy as load balancer for the RTMP protocol. For now it's working very very good but I have one small problem. I want to send the client's IP on the RTMP request after the load balancer. ...
0
votes
0answers
51 views

apache bench handshake failure server sending TCP FIN

I am trying to verify handshake performance by sending number of requests with out setting concurrency with below command. ab -k -n 18750 -c 1 -Z AES128-SHA -f TLS1.3 ...
0
votes
4answers
867 views

Cannot work out what is using port 8080

In Windows Server 2003 R2 64 Bit SP2 I have an app which will only use port 8080 but something is already using it. I would be happy to just kill whatever is using it but I can't work out what it is. ...
4
votes
2answers
5k views

Reduce firewall rules by half - one iptables rule for tcp and udp

I have a number of iptables rules on my firewall that look like this: iptables -A zone_lan_forward -p tcp -d 1.2.3.0/24 -j ACCEPT iptables -A zone_lan_forward -p udp -d 1.2.3.0/24 -j ACCEPT Is ...
0
votes
1answer
180 views

Existing TCP Relay Solutions [closed]

I have a scenario which requires the use of a TCP Relay. Before I set out to write something custom, I wanted to see if anyone knows of existing software that can do this for me. I have 2 devices on ...
-2
votes
1answer
45 views

TCP ports duplication [closed]

I need to communicate server1 to server2. Server1 should have to fetch some records from Server2 when we execute program.exe will make server1 to fetch server2 When I gave netstat -an | find ...
0
votes
2answers
439 views

Wireshark “length” column - what does it include?

Can anyone tell me what the "Length" column in WireShark refers to? I'm pretty sure it's the "size" of the entire frame on the wire. I did some calculations, but I didn't get the number that ...
0
votes
0answers
57 views

Cannot connect to TCP service from remote host

I have two servers running RHEL 5.8. SRV1 (10.58.192.36) has a service running on port 9002 and I need to connect to this service from SRV2 (10.58.192.42). [root@SRV1 ~]# netstat -anp | grep 9002 tcp ...
11
votes
1answer
503 views

Under what circumstances is TCP-over-TCP performing significantly worse than TCP alone (2014)?

Many admins keep perpetuating - on ServerFault and elsewhere - how bad of an idea TCP-over-TCP is, e.g. in VPNs. That even the slightest packet loss will make one suffer from at least severe ...
3
votes
1answer
8k views

Root cause of “curl: (56) SSL read: errno -5961” errors

I was evaluating some SSL failures, and noticed that when I use curl to one of the failing sites, I got curl: (56) SSL read: errno -5961; however, my google queries for that error didn't show the ...
2
votes
2answers
3k views

Difference between tcp recv buffer and tcp receive window size?

The command shows the tcp receive buffer size in bytes. $ cat /proc/sys/net/ipv4/tcp_rmem 4096 87380 4001344 where the three values signifies the min, default and max values respectively. ...
0
votes
0answers
153 views

TCP [RST,ACK] ignored

I have a Windows 2008 server and an application that connects over Internet to it. From time to time I see that I receive a TCP [RST, ACK] that is ignored by my application. Using TCPViewer I still ...
2
votes
1answer
176 views

iptables: match only the first packet of established TCP-connection

In my Apache-logfiles I find a lot of entries that contain "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 or similar crap. They come from non-RFC2616-connections (HTTP/1.1 without hostname). I ...
3
votes
3answers
2k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
0
votes
1answer
74 views

High number of TCP RST packets

Whilst looking into some transient network issues, I have noticed what seems to be a high number of RST packets received: Tcp: 40091950 active connections openings 44754733 passive connection ...
0
votes
0answers
99 views

Networking issue in IBM x3650 after install Ubuntu 14.04

I have a problem making TCP connections after a fresh Ubuntu 14.04 installation. First of all, after booting the interface is always off. In my case the interface is manually configured and named em2. ...
2
votes
2answers
2k views

Why do I see an IP packet with size 2960, way above the MTU setting of 1500 on the interface and it gets through?

I am analyzing traffic between a client and a Linux webserver running on a HP blade server, the client sometimes gets stuck waiting for more data when the webserver has closed the connection. The ...
0
votes
0answers
41 views

Duplicated TCP SYN Messages: second one is ACKed, but the connection is finally FINed

While wring a TCP server program, I found a very interesting symptoms. clients sends a first SYN packet. (server does not show any reactions.) clients sends another SYN packet after one second. ...
0
votes
1answer
767 views

Memory Pressure Protection Feature for TCP Stack - Provided by Microsoft Security Update KB967723

We've been having a lot of funky issues with some of our web based applications that allow clients to submit lot of image files to our servers. Lots of ports are used in the process. ...
-1
votes
1answer
33 views

Application protocol-based port forwarding/redirection [closed]

I need to split traffic on port 80 between HTTP and non-HTTP, and internally forward HTTP traffic to a port nginx will listen to, and non-HTTP traffic to port 22. Does anyone know of a piece of ...
1
vote
2answers
511 views

Send Text String to a Socket In Windows

I have a server that has an open socket that listens for a particular text string on it in order to perform an action. Our linux machines send this data via: echo "text_string" | nc -w 2 ...
5
votes
1answer
5k views

Forwarding linux terminal from serial port to TCP with socat

I'm working on embedded ARM platform, Slackware. I'm using G24 Java modem which is configured to forward data between ports /dev/ttyS1 and /dev/ttyACM0, so anything that goes onto any of these ports ...
1
vote
0answers
38 views

Why do some outgoing IP traffic not contain UID information?

I am doing egress logging on my server using IPTABLES with the following line which is supposed to provide UID information on all traffic that is logged: -A OUTPUT -j LOG --log-prefix "IPTABLES(O): " ...
0
votes
2answers
159 views

tcp ack delay almost 600ms, is this all right?

As far as I konw, tcp delay ack always 200ms, but now in my production environment it delay almost 600ms, my environment is below: ubuntu 11.04 48G memory 16 core, load not heavy; I catch packet in ...
1
vote
0answers
209 views

Why do I get connection timeouts to private services in Azure?

I seem to be seeing this with both my SQL Server, and my MongoDB replica set. I only get a handful a day, but it still concerns me. I am getting a timeout when trying to open a new connection to the ...
1
vote
0answers
83 views

TCP Window Size Allocation, TCP Window Zero Errors and Network Latency

My mind is about to explode as everyone is always blaming the network guys for disconnections and slowness in the networks, but Solarwinds Reports that all utilization in the network devices and links ...
1
vote
2answers
2k views

What does TCP: too many orphaned sockets mean?

When I use dmesg to look at linux kernel messages, I see a flood of.... TCP: too many orphaned sockets messages. My guess is this is sockets that are hanging around in TIME_WAIT after being closed ...
0
votes
0answers
205 views

Connection Timeout Issues - Solaris 11 SPARC

We're currently running some performance tests using Solaris 11 (SPARC) on some large hardware. The tests, which consist of sending SOAP requests (50kb per request), are running well up until we get ...
2
votes
2answers
403 views

Server 2012: SYN, no ACKs, on TCP ports higher than 6000

Seems ridiculous to read it back out loud, but I'm at a loss here. Server 2012 Standard. Runs a daemon for an accounting package on TCP 12502; at some point, the server stopped accepting connections ...
3
votes
2answers
2k views

TCP under OpenVPN is very slow (tsg attached)

I have a very weird problem with OpenVPN. Most VPNs work fine, except this one. Here I get very low performance from TCP connections, but the CPU load is low (so, not a CPU issue). OpenVPN is ...
0
votes
0answers
59 views

Single TCP-CLOSE_WAIT connection brings down application till restart

Recently found a behaviour where my application had a connection in TCP Close_wait state till the app was restarted (after about 5 hours). But during this period the SUnreclaim space was also ...
6
votes
1answer
4k views

How do I prevent TCP connection freezes over an OpenVPN network?

New details added at the end of this question; it's possible that I'm zeroing in on the cause. I have a UDP OpenVPN-based VPN set up in tap mode (I need tap because I need the VPN to pass multicast ...
0
votes
1answer
54 views

cannot send emails to other Web servers

I'm trying to limit my server's open ports in CSF. The IPv4 port settings include: # Allow incoming TCP ports TCP_IN = "22,25,53,80,110,143,443,587,3654,53343” # Allow outgoing TCP ports TCP_OUT = ...
0
votes
1answer
121 views

What do I need to consider when setting TCP idle timeouts?

What's purpose of having a [low] TCP idle timeouts? E.g., why have a 60 second timeout on a firewall or load-balancer? Is it a memory management or /performance optimization thing? Is there a security ...
1
vote
1answer
797 views

Linux iptables - reject tcp SYN with RST

I am doing an implementation on a linux machine to reject incoming telnet requests from wan side telnet port 8023. The functionality is achieved by using the below iptables rules. The first rule in ...
64
votes
7answers
88k views

How to forcibly close a socket in TIME_WAIT?

I run a particular program on linux which sometimes crashes. If you open it quickly after that, it listens on socket 49201 instead of 49200 as it did the first time. netstat reveals that 49200 is in ...
1
vote
0answers
46 views

periodic connection timeouts to nginx server

We have the following setup: One nginx server as a loadbalancer in front of four worker application servers. The nginx server get about 100 requests per second, sometimes more that that, active ...
3
votes
1answer
126 views

Is net.ipv4.vs.timeout_timewait used also for IPv6?

Does this setting for TCP net.ipv4.vs.timeout_timewait apply only to TCP connections established over IPv4 or does it also apply to TCP connections established over IPv6? I have found this for ...
0
votes
0answers
32 views

Want to route NFS response via an interface. What will the source ip of the packets being sent out?

The NFS server is listening on an interface for a new connection, once a new TCP connection is established the NFS operation is carried out. I'd like to send this NFS response via a different ...
0
votes
0answers
137 views

Proxy / Squid 2.7 / Debian Wheezy 6.7 / lots of TCP Timed-out

I'm facing a lot of TCP timed-out on a busy cache server and here below my sysctl.conf configuration as well as an output of netstat -st Kernel 3.2.0-4-amd64 #1 SMP Debian 3.2.57-3 x86_64 GNU/Linux ...
0
votes
0answers
133 views

Cannot connect to Solaris Server when Oracle GoldenGate process uses the port

I'm trying to test the Oracle goldengate to replicate data between two databases on the same server. So I installed two databases and two goldengate homes in the same machine. The goldengate ...
0
votes
1answer
383 views

iptables and TPROXY support

I'm running iptables v1.4.21 on Ubuntu 14.04 and is trying to setup iptables to use TPROXY. How can I check whether my current build of iptables supports TPROXY? I can check TPROXY support for ...
8
votes
1answer
555 views

TCP packet being retransmitted 7 times when sysctl tcp_retries1 is set to 3 - why?

Ubuntu 12.04 I am trying to better understand how many times TCP will attempt to retransmit a packet when it does not receive confirmation the destination received it. After reading the tcp man page ...
2
votes
1answer
213 views

remote login failed on windows XP, but remote telnet successful on mac

I recently set up an Oracle DB, started the listener on port 1561, and enabled TCP access. I then opened that port to all incoming connections. When I get on my Mac - I can use telnet remoteserver ...
1
vote
1answer
27 views

TCP rsyslogd events showing up as 2000 character continuations

I'm taking syslog events from a proprietary app. This could be the app's fault or it could be rsyslogd. Events are written like: Aug 15 16:00:00 10.11.12.13 Event1 from this wonderful product using ...
1
vote
2answers
77 views

When a socket switch to TIME_WAIT state, why I can't see its inode number?

I'm developing a program in python that parses /proc/net/tcp informations, but unfortunately, while I was doing this, I saw a strange thing. Practically, when a socket change in TIME_WAIT state, ...
-1
votes
1answer
55 views

CentOS 5.10 TCP Sequence Number

We have done a security check on a server and its come back with Linux Kernel TCP Sequence Number Generation Security Weakness. We are looking to correct this being flagged up on the check We are ...