[ I wrote : ]
> > Sometimes when I am finished with a net surfing session, my link stays up.
> > Seems like there is some sort off www traffic going on even after I exit
> > Netscape. Output from tcpdump:
> > 21:39:13.800157 mp-38-119.daxnet.no.8679 > leo.smart.net.www: F 0:0(0) ack
> > 1 win 2048
[SNIP!]
> > I haven't changed my filter rules much from the diald example which
> > accompanied diald-0.16.5a, the rules which keep the link up is:
> > accept tcp 120 tcp.dest=tcp.www
> > accept tcp 120 tcp.source=tcp.www
[ Cary O'Brien wrote: ]
[SNIP!]
> The F means the packet has the FIN (finish) flag set. The 867x port numbers
> are the port numbers on your end that (probably) netscape was assigned
> when it opened tcp/ip connections to talk to leo.smart.net. Netscape
> likes to do lots of transfers in parallel.
[SNIP!]
I made a filter rule which filters out the FIN packets, and placed it
ahead of the "normal" tcp.dest/source rules. Parts of my now modified
/usr/lib/diald/standard.filter ( = "nonstandard.filter"?... :-) ) :
[SNIP!]
#### TEST: don't hold the link up for FIN packets ####
ignore tcp tcp.fin
ignore tcp tcp.fin
#### END TEST ########################################
#### Here we go again with the the rules from the contribution ####
# make sure http transfers hold the link for 2 minutes, even after they end.
# NOTE: Your /etc/services may not define the tcp service www, in which
# case you should comment out the following two lines or get a more
# up to date /etc/services file. See the FAQ for information on obtaining
# a new /etc/services file.
accept tcp 120 tcp.dest=tcp.www
accept tcp 120 tcp.source=tcp.www
[SNIP!]
I started diald with this filter rule, no error messages. Next I brought
up the link, launched Netscape with two windows, connected to several home
pages, and then to one of the hosts who kept my link open earlier. Then I
waited. And yes, I got the same type of traffic; from tcpdump:
[SNIP!]
22:47:10.000433 mp-37-153.daxnet.no.2075 > half.dna.lth.se.www: F 0:0(0)
ack 1 win 2048
[SNIP!]
... however this time the link timed out, i.e. a "Happy ending", and
problem solved!
Thanks to Cary for providing me with a useful clue, and also thanks to
Eric Schenk for providing us with an excellent package for automating the
internet connection. His documentation is quite impressive once you get
the time to read it, I don't think I can claim to document _my_ projects
even half as good... :-)
Now I only need to stop "sendmail" from bouncing my link up all the
time... :-)
--
Best regards, Tore http://home.c2i.net/treimers/
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]