[92140] in North American Network Operators' Group
Re: TCP receive window set to 0; DoS or not?
daemon@ATHENA.MIT.EDU (Robert E.Seastrom)
Fri Sep 8 09:13:25 2006
To: billn@billn.net
Cc: Joshua Brewer <jbrewer@brandxnet.com>,
Travis Hassloch <travis.hassloch@rackspace.com>, nanog@merit.edu
From: Robert E.Seastrom <rs@seastrom.com>
Date: Fri, 08 Sep 2006 09:10:44 -0400
In-Reply-To: <Pine.LNX.4.64.0609071620240.16390@pegasus.billn.net> (billn@billn.net's
message of "Thu, 7 Sep 2006 16:21:52 -0700 (MST)")
Errors-To: owner-nanog@merit.edu
billn@billn.net writes:
> On Thu, 7 Sep 2006, Joshua Brewer wrote:
>
>> What about when we're seeing this on port 25?
>
> Sand worms.
>
> In all seriousness, your guess is as good as mine, at that point. If
> memory serves, the platforms we saw this on most, with web browsers, were
> mobile devices. What kind of volume are you seeing this in?
Since the error message is within a debug statement, it seems
appropriate to repeat the words of advice an old pilot friend of mine
once gave on making emergency landings at night in small aircraft:
"First, turn off your strobes and landing lights - you want to be able
to see well outside the aircraft. Find a road. Fly a normal
left-hand pattern, and as you turn base to final, turn your landing
lights back on. If you don't like what you see, turn them back off
again."
---rob