From mboxrd@z Thu Jan  1 00:00:00 1970
From: erik quanstrom <quanstro@quanstro.net>
Date: Mon,  9 Aug 2010 14:07:43 -0400
To: 9fans@9fans.net
Message-ID: <447d8bb72a04d66b4d65e139638544ce@ladd.quanstro.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: [9fans] tcp resequence queues
Topicbox-Message-UUID: 464292a6-ead6-11e9-9d60-3106f5b1d025

as it turns out, limiting the number of packets
in the resequence queue does catch a few ill
behaved connections that are not sending
tinygrams.  in this case, smtp:

Thu Aug  5 20:40:59: resequence queue > packets: 61 60; 81058 bytes
Thu Aug  5 20:40:59: reseq x.x.x.x.54772 -> 12.51.113.7.25
Sun Aug  8 16:57:54: resequence queue > packets: 46 45; 34000 bytes
Sun Aug  8 16:57:54: reseq y.y.y.y.1202 -> 12.51.113.7.25

(window scaling accounts for the different packet limits.)

- erik