TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
144 views

A LOT of connections from my external IP address to my web server

I installed Nagios recently on a Debian machine running an Apache web server among other things. The thing is that lately, Nagios tells me that the HTTP service is failing intermittently and it seems ...
1
vote
0answers
248 views

TCP High Send-q coupled with FIN_WAIT1 status

I'm having a problem with one of my webservers, which is taking minutes to completely render a web page. I had a look at the TCP connection and noticed that I have a very high value in the send-q ...
5
votes
4answers
6k views

Is there a way to see what is actually filtering TCP port communication?

nmap -p 7000-7020 10.1.1.1 Will output all the filtered ports Starting Nmap 6.40 ( http://nmap.org ) at 2015-03-04 12:18 EET Nmap scan report for 10.1.1.1 Host is up (0.00091s latency). PORT ...
0
votes
1answer
390 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
2
votes
1answer
160 views

How to filter for the most common problems with tcpdump/tshark

I am currently using the following command in Linux to get specifics on network problems. tshark -r file.pcap -q -z io,stat,1,\ "COUNT(tcp.analysis.retransmission) tcp.analysis.retransmission",\ ...
0
votes
1answer
40 views

Windows Server 2008 sending regular TCP DNS requests to Forwarders

Our organization's primary DNS server is a Windows Server 2008 which two Forwarders set. I happened to notice on our firewall that this server is sending out regular TCP requests to the Forwarders in ...
5
votes
2answers
517 views

(Why) does FreeBSD 'net.inet.tcp.always_keepalive' violate RFC1122?

While working on a server application that runs on FreeBSD and uses TCP, I noticed that TCP keepalive probes get sent even though my application explicitly disables SO_KEEPALIVE on TCP sockets. ...
0
votes
1answer
162 views

length of Tcp segment exceed MSS

I find a weird behavior in my Linux system, when I curling a web page, the received TCP segments are significant larger THAN the MSS. here is the output of tcpdump: 00:00:00.000000 IP ...
1
vote
0answers
677 views

tcp connection reset [RST, ACK]

getting this errors looks like server is restating the connection because of some packet loss any possible suggestion's to figure out this 37713 591.925575000 ...
0
votes
0answers
355 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
0
votes
1answer
362 views

how to determine client side or server side retransmission from a pcap

I am trying to get some clarification on something I read here: how to calculate packet loss from a binary TCPDUMP file The first answer says that the sequence number will be the same from client to ...
0
votes
1answer
323 views

server is not responding on SYN packets

On the attached tcp dump, the first two SYN packets (#21800 and 21801) came to the server, however SYN ACK was sent for the second SYN. Is that correct behaviour? My understanding is that the client ...
-1
votes
1answer
146 views

How to redirect all incoming packets to sniffer in Linux using iptables?

I need to redirect all incoming tcp packets from eth0 to current host (change ip address from 1.1.1.1 to 1.1.1.2) and outgoing tcp packets from sniffer from eth1 to another host(from 2.2.2.2 to ...
0
votes
3answers
231 views

how to use tcpdump to log only certain data in real time

I'd like to monitor network interfaces but only log things likes errors, collisions and dropped packets. The send that to stdout. – Can tcpdump be configured to do this?
2
votes
0answers
105 views

Linux - Outgoing connections from process timeout after the process restarts

banging my head against the wall with this one... I have an Ubuntu Linux server, on top of which our own process which holds 40K persistent connections to external services. When the process ...
0
votes
1answer
372 views

Concurrent TCP connections on Azure can be upto 500K. Really?

Let me be very clear at the outset that I am new to cloud technology. All I know is cloud servers are easily scalable (i.e. adding physical hardware is transparent to applications and users) and ...
1
vote
1answer
703 views

Linux clients can't connect, server and TCP Windows Size / Timestamps issue

We have a problem that a number of clients (all linux Ubuntu) are sometimes not able to connect to a remote server over SSH. If the problem occurs, Windows clients don't have that problem and can ...
1
vote
0answers
34 views

Split TCP packet - Data layer vs IPv4Layer

What is the different between split TCP packet in the Data layer compare to split the packet in IPv4Layer ?
0
votes
1answer
1k views

NetTcpPortSharing process won't start on Windows Server 2012 R2

I have a problem in Windows Server 2012 R2 : I have searched and try everything I know to fix this, but I cannot start NetTcpPortSharing service and therefore I cannot configure Windows Server ...
1
vote
0answers
1k views

HAProxy resetting backend connections

I'm in the process of setting up a series of servers as proxies to our application server, primarily to obscure the application server's IP as part of a suite of anti-DDOS measures. My goal is to ...
0
votes
1answer
250 views

TCP: out of memory - Nginx

I'm running a high traffic site on a nginx server. Last fews days I'm having problems with my VPS locking up (unable to SSH, and nginx seems to be down). When I look in the logs I can see the ...
0
votes
1answer
577 views

TCP packet loss against SQL-server

Where I work, we have had some issues with connections to the database. We get a lot of failures which appear as "recv failed" on the client side. I have used Wireshark to try to debug the problem and ...
1
vote
1answer
277 views

PHP-FPM TCP connections not terminating in time

I'm serving Wordpress pages via nginx/PHP5-FPM using APC caching (through the W3 Total Cache plugin). Nginx communicates with PHP-FPM via TCP sockets on port 9000. I've adjusted the number of max ...
0
votes
0answers
89 views

Bad ping results while testing 6000 TCP clients with 18 mbytes/s total traffic on Windows Web Server 2008

The clients are running on the machine #1. The server is installed on the machine #2. The machines have a gigabit connection through a switch on their private vlan. There are no errors in the switch ...
0
votes
1answer
83 views

SNORT only alerting on inbound traffic

I am trying to raise an alert when someone is setting up a connection to PORT 25 (tcp), whatever source or destination. For this i came up with this simple rule: alert tcp any any -> any 25 ...
0
votes
2answers
70 views

Get a website's host machine's OS/server software without access to the server

Is there a good methodology to find the operating system and server software that is being used on a served website that you don't have SSH access to? What I'm doing right now is looking at TCP/IP ...
2
votes
1answer
410 views

TCP Upload Speeds Slow to the Internet over LFN

I've got two Linux VMs separated by a 50 mbps WAN connection. There is about 70ms of RTT on this WAN link, so it's got some latency. I've been testing my upload throughput to the Internet from each of ...
1
vote
1answer
293 views

Hitting Ephemeral TCP Port Exhaustion

We run a high traffic website. Over the past few days, we've had several customers complain of sporadic downtime that we cannot reproduce. We have several web servers elected to receive traffic from ...
0
votes
0answers
200 views

Ghost tcp connections: ss sees them, nothing else does

We have a strange problem. Our remote server shows over 900 connections coming from our office over port 80: # ss -n | grep ESTAB | grep $OFFICEIP | grep :80 | wc -l 935 Netstat shows a similar ...
0
votes
1answer
396 views

Strange entry in open file list on Ubuntu server

On my Ubuntu server I occasionally run the following command to view any open files that are TCP connections from my server: lsof -uroot | grep 104.236.XX.XXX The last time I ran it, I saw this as ...
1
vote
1answer
270 views

No SYN/ACK answer from server

At first I describe my LAN organization. I have 2 Networks (scheme http://take.ms/s3CSy): 192.168.0.0 / 255.255.255.0, router ASUS RT-N65U with internal IP 192.168.0.1, static external IP without ...
0
votes
1answer
113 views

What does the tcp_fastretrans_alert error mean?

I found this error a couple of times in /var/log/messages after experiencing some odd TCP behavior: For some reason, if I connect to for example SSH for the first time in say an hour, the connection ...
0
votes
0answers
2k views

How many concurrent TCP connections are supported in Windows Server OSs?

I am distributing software in the form of a Windows service that can be installed, and am currently trying to ascertain the specifications for supported operating systems. The service communicates ...
0
votes
0answers
99 views

Unable to connect to remote MySQL from VPS

I am trying to establish a remote MySQL connection from one VPS to another. I have tried and done everything, I have allowed the outgoing TCP port (3306) in csf.conf, I have used Iptable rules online ...
-1
votes
2answers
230 views

how to force linux to accept packet with loopback ip

i have an embedded system with an Ethernet interface that needs to accept external packets with IP of 127.x.x.xx. is there a way to force Linux to accept external packets with this loop back address ...
1
vote
0answers
572 views

Always keep socat alive

I have a socat running nicely, executing my command when a connection comes in with the arguments provided. However, the issue I am having is that the socket is at EOF and the next time a connection ...
8
votes
4answers
700 views

Simulate slow connection between two ubuntu server machines

I want to simulate the following scenario: given that I have 4 ubuntu server machines A,B,C and D. I want to reduce the network bandwidth by 20% between machine A and machine C and 10% between A and ...
0
votes
2answers
321 views

TCP - TAP performance

Linux. Is there a performance loss from using a tap device vs a hardware one like eth0 ? The goal is to create a user space tcp/ip stack and avoid the kernel as much as possible. I would like to be ...
1
vote
2answers
11k views

Implementing TCP Sticky Sessions With HAProxy to Handle SSL Pass-through Traffic

How can we implement session stickiness in HAProxy when SSL must terminate on the backend servers? We need the stickiness because backends cannot share sessions. This is my original configuration: # ...
0
votes
1answer
134 views

Proxy-attack simulation

I have a WS2008 x64 server, that has NodeJS application working on its 80 port. Server constantly receives queries from different IP-addresses that are trying to use my application as a proxy. NodeJS ...
1
vote
0answers
2k views

Cannot make TCP Connection with OpenVPN Server

Client OpenVPN assigned IP: 10.8.0.2 ↓ TCP on 1194 Internet ↓ Router port-forwards 1194 to server- Public IP 104.162.67.198 ↓ Server LAN IP: 10.8.0.1 I think the above is what I am trying ...
0
votes
0answers
3k views

WSAECONNREFUSED SAP Gui unable to connect on SAP server on hp ux - inetd.conf file reference

I have a sap server installed on HP-UX vm, up and running. when I try to connect to the server from SAP client GUI installed on windows machine I get the following error --------------------------- ...
1
vote
2answers
329 views

How is a TCP request routed from a virtual machine to an outside resource and back again?

Scenario: Computer A has a local ip of 192.168.1.100, which is running a VM inside of it. The VM now makes a tcp request to an external IP address (74.125.225.98). Could someone explain how the ...
1
vote
0answers
123 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
-1
votes
1answer
239 views

Is ARP Connection oriented or connectionless?

Is ARP Connection oriented or connectionless? It uses TCP, but does that consider it connection oriented?
0
votes
2answers
373 views

Display IP & TCP statistics per interface (netstat -s with interface)

Linux has the ability to display protocol statistics with netstat -s. The output looks something like: Excerpt: 7487 times unabled to send RST due to no memory TCPDSACKIgnoredOld: 817 ...
1
vote
1answer
201 views

Limit Number of TCP connections in Linux Server, to avoid attack

I want to limit the number of TCP connections in Linux server, I have used the following command. iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 25 --connlimit-mask 32 ...
-2
votes
1answer
1k views

What is the best way to measure latency via a “telnet to port” test, preferably with built-in Linux tools?

I'm writing a Graphite/Diamond collector measuring network latency. Specifically it should measure the time it takes to open up a connection to a port on a remote server. And it needs to work via ...
0
votes
0answers
1k views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
1
vote
1answer
309 views

Tuning Linux TCP for large number of TIME_WAIT

It looks like we have a bunch of tcp connections hanging around on a busy webserver, this is the output from ss -s: Total: 366 (kernel 1037) TCP: 72108 (estab 130, closed 71964, orphaned 0, synrecv ...