search for: mss

Displaying 20 results from an estimated 504 matches for "mss".

Did you mean: mpss
2002 Feb 25
10
Clamping tcp mss values to decrease latency
...a packet in about 150ms. I want to cut this time down to decrease latency while serving files, so I thought I''d try and reduce the packet size for the offending upload streams (my webserver). The trick is that I also want all other tcp connections to have the normal full packet size. Enter MSS-clamping. My pppoe client for linux can do mss clamping on every packet that goes out and come in. Not enough control. There is an option to do mss-clamping in iptables, however this only works in the forward table. I can''t match and control outgoing web connections, just connections getti...
2003 Jun 01
1
Very weird network behaviour with 4.7-RELEASE-p10 (large)
...89538 200.203.183.32.1288 > 216.136.204.117.80: S 852569665:852569665(0) win 512 03:55:08.202061 216.136.204.117.80 > 200.203.183.32.1288: S 3771704683:3771704683(0) ack 85256966603:55:11.229621 216.136.204.117.80 > 200.203.183.32.1291: S 2387314094:2387314094(0) ack 2741695 win 57344 <mss 1460> (DF) 03:55:12.027408 200.203.183.32.1292 > 216.136.204.117.80: S 1532350261:1532350261(0) win 512 03:55:12.206721 216.136.204.117.80 > 200.203.183.32.1289: S 3305368856:3305368856(0) ack 1218353109 win 57344 <mss 1460> (DF) 03:55:12.239377 216.136.204.117.80 > 200.203.183...
2003 Apr 14
1
http://lartc.org/howto/lartc.cookbook.mtu-mss.html
current content below is annotated by some suggestions of things to add along with questions for those who know more than I do [in brackets] ================ # iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu This calculates the proper MSS for your link. [If I understand the code correctly ... - expert intervention invited] More precisely, this sets the MSS option to the MTU of the outgoing link for this packet (so it must have already been routed) minus the minimal size of a T...
2004 Aug 01
2
more on troubles with dmz www server
Thanks for the tips, Tom. Here is the tcpdump -n output on the dmz computer - this gets repeated several times as the remote computer attempts to connect: 18:11:54.264580 66.113.134.243.55080 > 192.168.2.1.8082: S 3210481212:3210481212(0) win 5840 <mss 1460,sackOK,timestamp 65650966 0,nop,wscale 0> (DF) 18:11:54.264696 192.168.2.1.8082 > 66.113.134.243.55080: S 2765561851:2765561851(0) ack 3210481213 win 16060 <mss 1460,sackOK,timestamp 8845122 65650966,nop,wscale 0> (DF) 18:11:55.336674 192.168.2.1.8082 > 66.113.134.243.55036: S...
2018 Apr 22
0
[Bug 351] Conntrack loses connection entries
...t;arlenslambert at gmail.com> --- Comment on attachment 134 --> https://bugzilla.netfilter.org/attachment.cgi?id=134 tcpdump of communication during which conntrack seems to "forget" packets 14:39:54.925957 IP Y.Y.Y.Y.1818 > X.X.X.X.2000: S 849153605:849153605(0) win 65535 <mss 1460,nop,nop,sackOK> 14:39:57.943185 IP Y.Y.Y.Y.1818 > X.X.X.X.2000: S 849153605:849153605(0) win 65535 <mss 1460,nop,nop,sackOK> 14:39:58.241750 IP X.X.X.X.2000 > Y.Y.Y.Y.1818: S 3217892892:3217892892(0) ack 849153606 win 15972 <mss 1452,nop,nop,sackOK> 14:39:58.242082 IP Y.Y....
2004 Feb 17
1
Setting MSS
Hi I have a (bizarre) problem with ssh, which someone has suggested may be down to the MSS value being too high. I know that within Shorewall I can clamp the MSS value to the MTU-40 value, but is there a way I can set MSS to a discreet value? I just want to (dis)prove the MSS theory at the moment (I know it isn''t a real fix). Thanks, Keith
2020 Jun 23
4
Voice broken during calls (again...)
...d right now... > Could you suggest me something to restrict the problem? > Currently, I think the problem can be: > > 1) on Asterisk > 2) on my Gateway/Firewall A couple of years ago I added this entry in my firewall: /sbin/iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu since I had the problem downloading data from an Internet site using my tablet. I found this site explaining that: https://lartc.org/howto/lartc.cookbook.mtu-mss.html I really forgot this entry, but now I checked all entries in my Firewall, and I see it, with my remar...
2017 Jun 17
1
client reconnect fails (was gluster heal entry reappears)
...rver and client (and vice versa) works fine. Looking at a tcpdump on the brick side I see the TCP handshake for the client. Looks strange because it is repeated after 1,2,4 seconds and so on 18:55:51.176832 IP cadmins101.49151 > cfilers201.24007: Flags [S], seq 3453818375, win 28364, options [mss 4052,sackOK,TS val 362061385 ecr 0,nop,wscale 7], length 0 18:55:51.176884 IP cfilers201.24007 > cadmins101.49151: Flags [S.], seq 1929363096, ack 3453818376, win 28280, options [mss 4052,sackOK,TS val 13791464 ecr 362061385,nop,wscale 7], length 0 18:55:51.179391 IP cadmins101.49149 > cfiler...
2002 Feb 28
1
TCP MSS clampage
Hey, My internet is provided via ADSL using PPPoE. When I take a look at ifconfig''s output, I see that eth0 has an MTU of 1500, and ppp0 has an MTU of 1492. I don''t _think_ that rp-pppoe (my pppoe util) is clamping the MSS. I am noticing some latency when there''s a lot of bandwidth in use (but not >90%). What should I clamp, eth0/ppp0? How much? And what with, rp-pppoe, or tc/iproute2/etc ? I guess I don''t really understand clamping MSS, can someone explain it in laymans terms? I have read...
2013 Jun 05
0
[Bug 662] netfilters clamp-mss-to-pmtu sets bad MSS when none was set before
...|RESOLVED CC| |netfilter at linuxace.com Resolution| |FIXED --- Comment #5 from Phil Oester <netfilter at linuxace.com> 2013-06-05 16:36:04 CEST --- Fixed in commit 409b545ac ("netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option"). Closing. -- Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
2007 Jul 25
1
v1.1 alpha1: can't pop/imap login with LDAP
...missed it? If there is no patch, then will there be any to be released sometime in near future? By the way, our dovecot configuration is: ----- protocols: imap pop3 listen(default): *:40143 listen(imap): *:40143 listen(pop3): *:40110 ssl_disable: yes disable_plaintext_auth: no login_dir: /opt/mrn/mss/var/run/dovecot/login login_executable(default): /opt/mrn/mss/libexec/dovecot/imap-login login_executable(imap): /opt/mrn/mss/libexec/dovecot/imap-login login_executable(pop3): /opt/mrn/mss/libexec/dovecot/pop3-login mail_location: maildir:~/mail mmap_disable: yes mail_executable(default): /opt/mrn...
2003 Jun 02
3
[jik@kamens.brookline.ma.us: MSS clamping doesn''t work with masquerading through VPN?]
...If this is not the correct forum for my question, can anyone suggest a better person or place to which I should direct it? Thank you, Jonathan Kamens ------- Start of forwarded message ------- From: Jonathan Kamens <jik@kamens.brookline.ma.us> To: lartc@mailman.ds9a.nl Subject: [LARTC] MSS clamping doesn''t work with masquerading through VPN? Date: Fri, 23 May 2003 12:42:10 -0400 My employer uses a Microsoft VPN concentrator. I followed the instructions at pptpclient.sourceforge.net to add support for that concentrator to my Linux machine; after doing so, I was able to succ...
2015 Jun 26
2
[Q] TCP segment sent is larger than peers advertised MSS
Hello, I am in the process of troubleshooting another problem and noticed a rather strange behavior with the openssh client. A client (OpenSSH 5.3) and a server (6.7p1) do the TCP handshake, the client announces a MSS of 1460 (its MTU is 1500), while the server announces a MSS of 1260 (its MTU is set to 1300). What troubles me is, that the client is sending the server a frame of 2034 bytes (TCP segment length of 1968, during the "Client: Key Exchange Init"). Why is it that the client seems to ignor...
2004 Jun 10
1
multiple connections
...ults. This is listening on eth1 as I try to SSH to the destination from an internal box (using lynx to connect to the same destination results in a web page): tcpdump: listening on eth1 07:13:12.614674 <Static IP>.37662 > <Dest IP>.ssh: S \ 2808907073:2808907073(0) win 5840 <mss1460,sackOK,timestamp \ 611570059 0,nop,wscale 0> (DF) 07:13:12.649772 <Dest IP>.ssh > <Static IP>.37662: S \ 2414052745:2414052745(0) \ ack 2808907074 win 65535 <mss 1400,nop,wscale \ 0,nop,nop,timestamp 2742813 611570059> (DF) 07:13:15.609403 <Static IP&g...
2003 Mar 11
0
Interrater and intrarater reliability
...(Result~Subject*Rater,data=Frame1) meanSquares<-summary(aovFull)[[1]][,3] for (raterAct in 1:tt) { raterActCat<-raterLabels[raterAct] aovAct<-aov(Result~Subject,data=Frame1[Frame1$Rater==raterActCat,]) meanSquares<-c(meanSquares,summary(aovAct)[[1]][2,3]) } names(meanSquares)<-c('MSS','MSR','MSSR','MSE',paste('MSE',levels(Frame1$Rater),sep='')) MSS<-meanSquares[1] MSR<-meanSquares[2] MSSR<-meanSquares[3] MSE<-meanSquares[4] MSEpart<-meanSquares[-(1:4)] # the same for random and fixed, see table 2 (p. 780) and 3 (p. 281...
2017 Jan 26
2
cannot connect without user/pass on Windows 10
...ithout entering a user/pass. More precisely: If you try to connect manually to \\IP it says "Username or password incorrect" and prompts to enter a username/password. Despite the server setting to map all users to guest (see further down). I did a packet dump and the client pc asks NTLMSSP_NEGOTIATE, server replies with an NTLMSSP_CHALLENGE and then the client pc simply hangs up (TCP RST). Now the (more) interesting bit: all this only happens when you use a "microsoft account", not if you use a local account. With a local account on the laptop start -> run -> \\I...
2006 Jan 30
5
Debian Sarge Server with iptables behind D-Link Router
...tcpdump. Here''s what tcpdump shows: tcpdump for port 443: Not working access from inside the lan to the servers external Name / the servers external IP: => no connection ==================================== p54BE15A1.dip0.t-ipconnect.de.https: S 1859848764:1859848764(0) win 65535 <mss 1260,nop,nop,sackOK> 18:43:41.477631 IP lp-java.linkpool.3491 > p54BE15A1.dip0.t-ipconnect.de.https: S 1859848764:1859848764(0) win 65535 <mss 1260,nop,nop,sackOK> 18:43:41.479358 IP p54BE15A1.dip0.t-ipconnect.de.https > lp-java.linkpool.3491: R 0:0(0) ack 1859848765 win 0 18:43:41.9...
2009 Jan 14
1
Transport endpoint is not connected while mounting....
...a TCP dump showing port 7777 is not blocked (I added an exception in IP tables) (Node 0) 13:13:11.711539 IP (tos 0x0, ttl 64, id 18286, offset 0, flags [DF], proto: TCP (6), length: 60) 10.128.7.33.47601 > 10.128.255.3.cbt: S, cksum 0xd272 (correct), 3820380795:3820380795(0) win 5840 <mss 1460,sackOK,timestamp 4294911253 0,nop,wscale 6> 13:13:14.710703 IP (tos 0x0, ttl 64, id 18287, offset 0, flags [DF], proto: TCP (6), length: 60) 10.128.7.33.47601 > 10.128.255.3.cbt: S, cksum 0xc6ba (correct), 3820380795:3820380795(0) win 5840 <mss 1460,sackOK,timestamp 429491425...
2005 May 01
1
Partial F-test comparing full and reduced regression models
...earity problems (between three regressor variables). I need a F-test that will allow me to compare between full (with all variables) and partial models (minus 1=< variables). The general F-test formula I'm using is: F = {[SS(full model) - SS(reduced model)] / (#variables taken out)} / MSS(full model) Unfortunately, the ANOVA table parses the SS and MSS between the variables and does not give the statistics for the regression model as a whole, otherwise I'd do this by hand. So, really, I have two questions: 1) Can I just add up all the SS and MSS for all the variables to get...
2007 Apr 01
3
Doing partial-f test for stepwise regression
...; three regressor variables). I need a F-test that will allow me to > compare between full (with all variables) and partial models (minus > 1=< variables). The general F-test formula I'm using is: > > F = {[SS(full model) - SS(reduced model)] / (#variables taken out)} / > MSS(full model) > > Unfortunately, the ANOVA table parses the SS and MSS between the > variables and does not give the statistics for the regression model as > a whole, otherwise I'd do this by hand. > > So, really, I have two questions: 1) Can I just add up all the SS and...