Hello, I'm observing slowdown on my network, so I started some tcpdump sessions to see what is happening on my main box, which hosts a samba PDC server, DNS, NTP and SSH servers. viewing those sessions with ethereal, I see that approx 10% of the net traffic is bad packets. Those Packets are tagged 'Bad Checksum'. The whole packets come from the server to the clients, from port 445 or 139 to an unprivileged port. None of the SSH DNS or NTP contain these errors. Has anyone already heard about that ? I googled a moment, but didn't find relevant information... My samba : 3.0.14a-3sarge2 It is backended on an OpenLDAP server (Debian too). Thanks for your answers, Guillaume.
> viewing those sessions with ethereal, I see that approx 10% of the net > traffic is bad packets. > > Those Packets are tagged 'Bad Checksum'. The whole packets come from the > server to the clients, from port 445 or 139 to an unprivileged port. > > None of the SSH DNS or NTP contain these errors.Are you sure the last statement is true? Bad checksum tagged packets occur if your network interface uses TCP checksum offloading. Take a look at: http://hardware.mcse.ms/archive92-2005-8-228758.html -Remy
Seemingly Similar Threads
- Norton personal firewall tells me that bad TCP packets are received
- Cingular/ATT killing my IMAP/POP connections with bad TCP FIN packets?
- Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
- app_rxfax produces "RTP: Received packet with bad UDP checksum"
- Received packet with bad UDP checksum