I'm running two clusters at one DataCenter :
Main Cluster : two SPLAT NGAI R55 on Xeon
( 70000 sessions configured )
Internal extra cluster : two SPLAT NGAI R55 on Xeon
( 50000 sessions configured )
One management server : SPLAT R55 on Intel
I'm having lots of these errors with no change at config :
TCP packet out of state: First packet isn't SYN tcp_flags: RST-ACK
TCP packet out of state: First packet isn't SYN tcp_flags: ACK
TCP packet out of state: First packet isn't SYN tcp_flags: FIN-ACK
TCP packet out of state: First packet isn't SYN tcp_flags: SYN-ACK
TCP packet out of state: First packet isn't SYN tcp_flags: RST
All TCP errors are occuring with traffic that cames back from servers
behing the Internal extra cluster to the originated PCs at an remote
VPN site.
Note that all traffic to/from the same site destinated/originated at
hosts in a network, directly or not, connected to the Main Cluster are
not droped.
Superficially, all TCP state work is been done correctly at Main Cluster.
Some problem are occuring at Internal extra cluster, but i cant find what
is causing it .
Any1 helping ?
--
Antonio Costa
Analista de Redes e Seguranca
CCNA/CCSE/MCSE/LinuxAdmin
Odebrecht Engenharia e Construcao
Sao Paulo / Brasil
Tel.: +55-11-3443-9813
Fax.: +55-11-3443-9861/9618
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
