Hi
I'm having issues with rsyncing ftp.rfc-editor.org through a PF firewall,
other connections (also other rsync connections) work well.
rsync -avz --delete ftp.rfc-editor.org::rfcs-text-only my-rfc-mirror
receiving file list ... done
./
rfc-index.xml
...
rfc1591.txt
rfc1592.txt
nothing is going to happen... will timeout in a few minutes
my setup is LAN --> OBSDGW2 -> PPPOE -> Internet
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:50:8b:95:a4:d3
description: WLan uplink
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::250:8bff:fe95:a4d3%fxp1 prefixlen 64 scopeid 0x3
inet 10.1.16.1 netmask 0xfffffffc broadcast 10.1.16.3
pppoe0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1492
dev: rl0 state: session
sid: 0xe682 PADI retries: 49 PADR retries: 0 time: 09:51:14
I've played with scrub (out on pppoe0 max-mss 1440, +no-df, + fragment
reassemble, ...) but doesnt solve my problem.
I'm using nat on pppoe0 (nat on $extif from <localips> to any -> (pppoe0))
I would provide a full tcpdump, but that would make my message a bit big...
Currently my pf.conf looks as follows:
set block-policy return
set skip on { lo, enc0 }
#scrub in all no-df random-id fragment reassemble
#scrub out on pppoe0 max-mss 1492 no-df
scrub out on pppoe0 max-mss 1440
nat on $extif from <localips> to any -> (pppoe0)
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr on $allif inet proto tcp from <localips>
to !<norouteips> port ftp -> 127.0.0.1 port 8021
rdr on $extif inet proto tcp from any to ($extif)
port http -> 10.0.0.200 port 80
#rdr on $extif inet proto tcp from any to ($extif)
port ftp -> 10.0.0.200 port ftp
#rdr on $extif inet proto tcp from any to any
port 49152:65535 -> 10.0.0.200 port 49152:65535
norouteips and allow local traffic on trusted interfaces
antispoof quick for { $extif, $wlanif }
block in all
pass out all keep state flags S/SA
block in quick on $extif inet from <norouteips> to any
block return out quick on $extif inet proto icmp from any to
<norouteips>
block drop out quick on $extif inet from any to <norouteips>
pass in quick on $allif inet from <localips> to !<firewall>
keep state
pass in quick inet proto icmp from any to { ($extif)
<firewall> } icmp-type echoreq code 0
pass in quick inet proto tcp from any to { ($extif)
<firewall> } port ssh keep state
[some rules for other subnets]
pass in on $wlanif inet from 10.1.16.200 to any
keep state flags S/SA
18:28:07.899188 128.9.176.20.rsync > 10.1.16.200.1701: . 9777343:9778583(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728300 1809939> (DF)
18:28:07.901084 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9778583 win 23552
<nop,nop,timestamp 1810010 1443728300> (DF)
18:28:07.902910 128.9.176.20.rsync > 10.1.16.200.1701: . 9778583:9780011(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728300 1809939> (DF)
18:28:07.906844 128.9.176.20.rsync > 10.1.16.200.1701: . 9780011:9781439(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728300 1809939> (DF)
18:28:07.908805 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9781439 win 23552
<nop,nop,timestamp 1810012 1443728300> (DF)
18:28:07.910276 128.9.176.20.rsync > 10.1.16.200.1701: . 9781439:9782679(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728300 1809939> (DF)
18:28:07.913469 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9782679 win 23552
<nop,nop,timestamp 1810013 1443728300> (DF)
18:28:07.914486 128.9.176.20.rsync > 10.1.16.200.1701: . 9782679:9784107(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728300 1809939> (DF)
18:28:07.918422 128.9.176.20.rsync > 10.1.16.200.1701: . 9784107:9785535(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728302 1809944> (DF)
18:28:07.920355 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9785535 win 23552
<nop,nop,timestamp 1810015 1443728300> (DF)
18:28:07.921610 128.9.176.20.rsync > 10.1.16.200.1701: . 9785535:9786775(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728302 1809944> (DF)
18:28:07.923453 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9786775 win 23552
<nop,nop,timestamp 1810016 1443728302> (DF)
18:28:07.925819 128.9.176.20.rsync > 10.1.16.200.1701: . 9786775:9788203(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728302 1809944> (DF)
18:28:07.929512 128.9.176.20.rsync > 10.1.16.200.1701: . 9788203:9789631(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728302 1809944> (DF)
18:28:07.931435 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9789631 win 23552
<nop,nop,timestamp 1810018 1443728302> (DF)
18:28:07.933195 128.9.176.20.rsync > 10.1.16.200.1701: . 9789631:9790871(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728302 1809944> (DF)
18:28:07.936777 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9790871 win 23552
<nop,nop,timestamp 1810019 1443728302> (DF)
18:28:07.937141 10.1.16.200.ssh > 192.168.0.12.58575: P 29809:29873(64) ack
144 win 1972 <nop,nop,timestamp 1810019 7902346> (DF) [tos 0x10]
18:28:07.937358 192.168.0.12.58575 > 10.1.16.200.ssh: . ack 29873 win 3252
<nop,nop,timestamp 7902366 1810019> (DF) [tos 0x10]
18:28:07.949505 128.9.176.20.rsync > 10.1.16.200.1701: . 9790871:9792299(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728305 1809951> (DF)
18:28:07.953422 128.9.176.20.rsync > 10.1.16.200.1701: . 9792299:9793727(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728305 1809951> (DF)
18:28:07.955343 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9793727 win 23552
<nop,nop,timestamp 1810024 1443728305> (DF)
18:28:07.956881 128.9.176.20.rsync > 10.1.16.200.1701: . 9793727:9794967(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728305 1809951> (DF)
18:28:07.959626 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9794967 win 23552
<nop,nop,timestamp 1810025 1443728305> (DF)
18:28:07.959979 10.1.16.200.ssh > 192.168.0.12.58575: P 29873:29921(48) ack
144 win 1972 <nop,nop,timestamp 1810025 7902366> (DF) [tos 0x10]
18:28:07.960203 192.168.0.12.58575 > 10.1.16.200.ssh: . ack 29921 win 3252
<nop,nop,timestamp 7902372 1810025> (DF) [tos 0x10]
18:28:07.961070 128.9.176.20.rsync > 10.1.16.200.1701: . 9794967:9796395(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728305 1809951> (DF)
18:28:07.964756 128.9.176.20.rsync > 10.1.16.200.1701: . 9796395:9797823(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728305 1809951> (DF)
18:28:07.966690 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9797823 win 23552
<nop,nop,timestamp 1810026 1443728305> (DF)
18:28:07.980264 128.9.176.20.rsync > 10.1.16.200.1701: . 9797823:9799063(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728307 1809956> (DF)
18:28:07.982246 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9799063 win 23552
<nop,nop,timestamp 1810030 1443728307> (DF)
18:28:07.984732 128.9.176.20.rsync > 10.1.16.200.1701: . 9799063:9800491(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728307 1809956> (DF)
18:28:07.988409 128.9.176.20.rsync > 10.1.16.200.1701: . 9800491:9801919(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728307 1809956> (DF)
18:28:07.990397 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9801919 win 23552
<nop,nop,timestamp 1810032 1443728307> (DF)
18:28:07.991842 128.9.176.20.rsync > 10.1.16.200.1701: . 9801919:9803159(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728307 1809956> (DF)
18:28:07.995074 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9803159 win 23552
<nop,nop,timestamp 1810033 1443728307> (DF)
18:28:07.995424 10.1.16.200.ssh > 192.168.0.12.58575: P 29921:29969(48) ack
144 win 1972 <nop,nop,timestamp 1810033 7902372> (DF) [tos 0x10]
18:28:07.995606 192.168.0.12.58575 > 10.1.16.200.ssh: . ack 29969 win 3252
<nop,nop,timestamp 7902381 1810033> (DF) [tos 0x10]
18:28:07.996133 128.9.176.20.rsync > 10.1.16.200.1701: . 9803159:9804587(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728307 1809956> (DF)
18:28:08.012053 128.9.176.20.rsync > 10.1.16.200.1701: . 9804587:9806015(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.014083 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9806015 win 23552
<nop,nop,timestamp 1810038 1443728307> (DF)
18:28:08.015726 128.9.176.20.rsync > 10.1.16.200.1701: . 9806015:9807255(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.017648 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9807255 win 23552
<nop,nop,timestamp 1810039 1443728310> (DF)
18:28:08.019460 128.9.176.20.rsync > 10.1.16.200.1701: . 9807255:9808683(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.023404 128.9.176.20.rsync > 10.1.16.200.1701: . 9808683:9810111(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.025381 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9810111 win 23552
<nop,nop,timestamp 1810041 1443728310> (DF)
18:28:08.026819 128.9.176.20.rsync > 10.1.16.200.1701: . 9810111:9811351(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.028722 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9811351 win 23552
<nop,nop,timestamp 1810042 1443728310> (DF)
18:28:08.030775 128.9.176.20.rsync > 10.1.16.200.1701: . 9811351:9812779(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728310 1809965> (DF)
18:28:08.047041 128.9.176.20.rsync > 10.1.16.200.1701: . 9812779:9814207(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728315 1809977> (DF)
18:28:08.050011 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9814207 win 23552
<nop,nop,timestamp 1810047 1443728310> (DF)
18:28:08.050710 128.9.176.20.rsync > 10.1.16.200.1701: . 9814207:9815447(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728315 1809977> (DF)
18:28:08.052547 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9815447 win 23552
<nop,nop,timestamp 1810048 1443728315> (DF)
18:28:08.054672 128.9.176.20.rsync > 10.1.16.200.1701: . 9815447:9816875(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728315 1809977> (DF)
18:28:08.058608 128.9.176.20.rsync > 10.1.16.200.1701: . 9816875:9818303(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728315 1809977> (DF)
18:28:08.060535 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9818303 win 23552
<nop,nop,timestamp 1810050 1443728315> (DF)
18:28:08.061799 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819543(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728315 1809977> (DF)
18:28:08.078327 128.9.176.20.rsync > 10.1.16.200.1701: . 9819543:9820971(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728317 1809980> (DF)
18:28:08.082265 128.9.176.20.rsync > 10.1.16.200.1701: . 9820971:9822399(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728317 1809980> (DF)
18:28:08.085701 128.9.176.20.rsync > 10.1.16.200.1701: . 9822399:9823639(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728317 1809980> (DF)
18:28:08.089657 128.9.176.20.rsync > 10.1.16.200.1701: . 9823639:9825067(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728317 1809980> (DF)
18:28:08.093610 128.9.176.20.rsync > 10.1.16.200.1701: . 9825067:9826495(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728317 1809980> (DF)
18:28:08.109354 128.9.176.20.rsync > 10.1.16.200.1701: . 9826495:9827735(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728320 1809988> (DF)
18:28:08.113314 128.9.176.20.rsync > 10.1.16.200.1701: . 9827735:9829163(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728320 1809988> (DF)
18:28:08.117251 128.9.176.20.rsync > 10.1.16.200.1701: . 9829163:9830591(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728320 1809988> (DF)
18:28:08.120926 128.9.176.20.rsync > 10.1.16.200.1701: . 9830591:9831831(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728320 1809988> (DF)
18:28:08.124889 128.9.176.20.rsync > 10.1.16.200.1701: . 9831831:9833259(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728320 1809988> (DF)
18:28:08.141150 128.9.176.20.rsync > 10.1.16.200.1701: . 9833259:9834687(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728325 1810000> (DF)
18:28:08.144585 128.9.176.20.rsync > 10.1.16.200.1701: . 9834687:9835927(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728325 1810000> (DF)
18:28:08.148296 128.9.176.20.rsync > 10.1.16.200.1701: . 9835927:9837355(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728325 1810000> (DF)
18:28:08.152482 128.9.176.20.rsync > 10.1.16.200.1701: . 9837355:9838783(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728325 1810000> (DF)
18:28:08.155918 128.9.176.20.rsync > 10.1.16.200.1701: . 9838783:9840023(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728325 1810000> (DF)
18:28:08.159630 128.9.176.20.rsync > 10.1.16.200.1701: . 9840023:9841451(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728326 1810004> (DF)
18:28:08.163574 128.9.176.20.rsync > 10.1.16.200.1701: . 9841451:9842879(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728326 1810004> (DF)
18:28:08.167010 128.9.176.20.rsync > 10.1.16.200.1701: . 9842879:9844119(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728326 1810004> (DF)
18:28:08.171207 128.9.176.20.rsync > 10.1.16.200.1701: . 9844119:9845547(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728326 1810004> (DF)
18:28:08.175150 128.9.176.20.rsync > 10.1.16.200.1701: . 9845547:9846975(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728326 1810004> (DF)
18:28:08.178336 128.9.176.20.rsync > 10.1.16.200.1701: . 9846975:9848215(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728329 1810012> (DF)
18:28:08.182297 128.9.176.20.rsync > 10.1.16.200.1701: . 9848215:9849643(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728329 1810012> (DF)
18:28:08.186487 128.9.176.20.rsync > 10.1.16.200.1701: . 9849643:9851071(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728329 1810012> (DF)
18:28:08.189917 128.9.176.20.rsync > 10.1.16.200.1701: . 9851071:9852311(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728329 1810012> (DF)
18:28:08.193876 128.9.176.20.rsync > 10.1.16.200.1701: . 9852311:9853739(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728329 1810012> (DF)
18:28:08.210138 128.9.176.20.rsync > 10.1.16.200.1701: . 9853739:9855167(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728332 1810018> (DF)
18:28:08.213566 128.9.176.20.rsync > 10.1.16.200.1701: . 9855167:9856407(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728332 1810018> (DF)
18:28:08.217527 128.9.176.20.rsync > 10.1.16.200.1701: . 9856407:9857835(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728332 1810018> (DF)
18:28:08.221711 128.9.176.20.rsync > 10.1.16.200.1701: . 9857835:9859263(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728332 1810018> (DF)
18:28:08.224939 128.9.176.20.rsync > 10.1.16.200.1701: . 9859263:9860503(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728332 1810018> (DF)
18:28:08.241183 128.9.176.20.rsync > 10.1.16.200.1701: . 9860503:9861931(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728334 1810025> (DF)
18:28:08.245124 128.9.176.20.rsync > 10.1.16.200.1701: . 9861931:9863359(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728334 1810025> (DF)
18:28:08.248548 128.9.176.20.rsync > 10.1.16.200.1701: . 9863359:9864599(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728334 1810025> (DF)
18:28:08.252514 128.9.176.20.rsync > 10.1.16.200.1701: . 9864599:9866027(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728334 1810025> (DF)
18:28:08.256702 128.9.176.20.rsync > 10.1.16.200.1701: . 9866027:9867455(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728334 1810025> (DF)
18:28:08.272459 128.9.176.20.rsync > 10.1.16.200.1701: . 9867455:9868695(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728338 1810032> (DF)
18:28:08.276413 128.9.176.20.rsync > 10.1.16.200.1701: . 9868695:9870123(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728338 1810032> (DF)
18:28:08.280120 128.9.176.20.rsync > 10.1.16.200.1701: . 9870123:9871551(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728338 1810032> (DF)
18:28:08.283788 128.9.176.20.rsync > 10.1.16.200.1701: . 9871551:9872791(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728338 1810032> (DF)
18:28:08.287746 128.9.176.20.rsync > 10.1.16.200.1701: . 9872791:9874219(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728338 1810032> (DF)
18:28:08.303774 128.9.176.20.rsync > 10.1.16.200.1701: . 9874219:9875647(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728341 1810041> (DF)
18:28:08.307441 128.9.176.20.rsync > 10.1.16.200.1701: . 9875647:9876887(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728341 1810041> (DF)
18:28:08.311394 128.9.176.20.rsync > 10.1.16.200.1701: . 9876887:9878315(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728341 1810041> (DF)
18:28:08.315339 128.9.176.20.rsync > 10.1.16.200.1701: . 9878315:9879743(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728341 1810041> (DF)
18:28:08.318772 128.9.176.20.rsync > 10.1.16.200.1701: . 9879743:9880983(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728341 1810041> (DF)
18:28:08.335053 128.9.176.20.rsync > 10.1.16.200.1701: . 9880983:9882411(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728342 1810041> (DF)
18:28:08.339236 128.9.176.20.rsync > 10.1.16.200.1701: . 9882411:9883839(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.342668 128.9.176.20.rsync > 10.1.16.200.1701: . 9883839:9885079(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.346387 128.9.176.20.rsync > 10.1.16.200.1701: . 9885079:9886507(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.350327 128.9.176.20.rsync > 10.1.16.200.1701: . 9886507:9887935(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.353761 128.9.176.20.rsync > 10.1.16.200.1701: . 9887935:9889175(1240)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.357961 128.9.176.20.rsync > 10.1.16.200.1701: . 9889175:9890603(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728345 1810050> (DF)
18:28:08.737149 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728392 1810050> (DF)
18:28:08.745810 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810051 1443728315> (DF)
18:28:08.747222 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810221 1443728315,nop,nop,sack 1 {9823639:9825067} > (DF)
18:28:08.747783 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9826495} > (DF)
18:28:08.748342 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9827735} > (DF)
18:28:08.748880 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9829163} > (DF)
18:28:08.749577 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9830591} > (DF)
18:28:08.750191 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9831831} > (DF)
18:28:08.750834 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9833259} > (DF)
18:28:08.750942 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9834687} > (DF)
18:28:08.751504 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810222 1443728315,nop,nop,sack 1 {9823639:9835927} > (DF)
18:28:08.752048 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9837355} > (DF)
18:28:08.752661 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9838783} > (DF)
18:28:08.752764 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9840023} > (DF)
18:28:08.753444 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9841451} > (DF)
18:28:08.754114 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9842879} > (DF)
18:28:08.754737 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9844119} > (DF)
18:28:08.755293 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9845547} > (DF)
18:28:08.755808 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810223 1443728315,nop,nop,sack 1 {9823639:9846975} > (DF)
18:28:08.756431 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9848215} > (DF)
18:28:08.756537 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9849643} > (DF)
18:28:08.757523 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9851071} > (DF)
18:28:08.757630 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9852311} > (DF)
18:28:08.758799 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9853739} > (DF)
18:28:08.759181 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9855167} > (DF)
18:28:08.759507 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9856407} > (DF)
18:28:08.760084 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810224 1443728315,nop,nop,sack 1 {9823639:9857835} > (DF)
18:28:08.760766 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9859263} > (DF)
18:28:08.761942 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9860503} > (DF)
18:28:08.762606 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9861931} > (DF)
18:28:08.762716 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9863359} > (DF)
18:28:08.763358 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9864599} > (DF)
18:28:08.763462 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9866027} > (DF)
18:28:08.764722 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9867455} > (DF)
18:28:08.764828 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810225 1443728315,nop,nop,sack 1 {9823639:9868695} > (DF)
18:28:08.765705 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9870123} > (DF)
18:28:08.766140 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9871551} > (DF)
18:28:08.766617 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9872791} > (DF)
18:28:08.767339 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9874219} > (DF)
18:28:08.767884 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9875647} > (DF)
18:28:08.768426 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810226 1443728315,nop,nop,sack 1 {9823639:9876887} > (DF)
18:28:08.768950 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9878315} > (DF)
18:28:08.769858 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9879743} > (DF)
18:28:08.770791 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9880983} > (DF)
18:28:08.771187 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9882411} > (DF)
18:28:08.771288 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9883839} > (DF)
18:28:08.771648 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810227 1443728315,nop,nop,sack 1 {9823639:9885079} > (DF)
18:28:08.772047 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810228 1443728315,nop,nop,sack 1 {9823639:9886507} > (DF)
18:28:08.772575 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810228 1443728315,nop,nop,sack 1 {9823639:9887935} > (DF)
18:28:08.773206 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810228 1443728315,nop,nop,sack 1 {9823639:9889175} > (DF)
18:28:08.773520 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819543 win 23552
<nop,nop,timestamp 1810228 1443728315,nop,nop,sack 1 {9823639:9890603} > (DF)
18:28:08.773953 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1810228 1443728392,nop,nop,sack 2 {9818303:9819543}
{9823639:9890603} > (DF)
18:28:10.287353 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728547 1810050> (DF)
18:28:10.289461 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1810607 1443728547,nop,nop,sack 2 {9818303:9819731}
{9823639:9890603} > (DF)
18:28:11.934113 arp who-has dslgw.gate.mrkofee.ath.cx tell
wlangw-ether.gate.mrkofee.ath.cx
18:28:11.934136 arp reply dslgw.gate.mrkofee.ath.cx is-at 0:50:8b:95:a4:d3
18:28:13.387087 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443728857 1810050> (DF)
18:28:13.389221 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1811382 1443728857,nop,nop,sack 2 {9818303:9819731}
{9823639:9890603} > (DF)
18:28:19.587162 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443729477 1810050> (DF)
18:28:19.589294 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1812932 1443729477,nop,nop,sack 2 {9818303:9819731}
{9823639:9890603} > (DF)
18:28:31.987087 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443730717 1810050> (DF)
18:28:31.989213 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1816031 1443730717,nop,nop,sack 2 {9818303:9819731}
{9823639:9890603} > (DF)
18:28:44.626684 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1819191 1443730717,nop,nop,sack 1 {9823639:9890603} > (DF)
18:28:56.786766 128.9.176.20.rsync > 10.1.16.200.1701: . 9818303:9819731(1428)
ack 100609 win 0 <nop,nop,timestamp 1443733197 1810050> (DF)
18:28:56.788907 10.1.16.200.1701 > 128.9.176.20.rsync: . ack 9819731 win 23528
<nop,nop,timestamp 1822231 1443733197,nop,nop,sack 2 {9818303:9819731}
{9823639:9890603} > (DF)
any suggestions? thanks!
