Posts Tagged ‘solaris kernel bug’

solaris kernel bug – ack replied before sync/ack valid outbound packets dropped

April 9th, 2012 Comments off

If you intermittently getting the following error “; socket closed.” , and after some tcpdumping you may find the following:

From the network traffic analysing you may find the following incorrect package exchange chain exists:

testhost1 -- > testhost2 (SYN)
testhost1 < -- testhost2 (ACK) -- on this point should be sent SYN ACK package
testhost1 -- > testhost2 (RST) - respectively in case when it didn't receive SYN/ACK – client initiate reset TCP connection

Actually this is a solaris kernel bug, more info you can refer to
The workaround is running this:
ndd -set /dev/ip ip_ire_arp_interval 999999999
After this, the packet drop to 1 per week per host.

More info about this kernel bug can be found here