[clug] Treason uncloaked!

[Tony Breeds]

On Thu, Sep 21, 2006 at 09:29:49AM +1000, Michael James wrote:
> Quite frequently /var/log/messages offers this intriguing entry:
> 
> kernel: TCP: Treason uncloaked!
> 	Peer 10.0.1.95:514/1023 shrinks window
> 	3222363773:3222384045. Repaired.
> 
> As you can see from the IP, it's a private subnet,
>  it's my machine that's being complained about.
> 
> What's it likely to be?  (curiosity)

The comment above the printk() says:

/* Receiver dastardly shrinks window. Our retransmits
 * become zero probes, but we should not timeout this
 * connection. If the socket is an orphan, time it out,
 * we cannot allow such beasts to hang infinitely.
 */
 
> Is it anything I should worry about?

It's the reciever that's causing the problem so talk to them.
What OS is the reciever?

> If it is, what could I do to fix it?

If you can trigger it at will, try tuning off window scaling.

echo 0 > /proc/sys/net/ipv4/tcp_window_scaling

To see if that fixes things.

Yours Tony

   linux.conf.au       http://linux.conf.au/ || http://lca2007.linux.org.au/
   Jan 15-20 2007      The Australian Linux Technical Conference!