Service provider story about tracking down TCP RSTs

• Subject: Service provider story about tracking down TCP RSTs
• From: tmanito at protonmail.com (Timothy Manito)
• Date: Sun, 02 Sep 2018 23:07:43 +0000
• In-reply-to: <[email protected]>
• References: <[email protected]> <CA[email protected]> <CAAWx_pXC5i[email protected]> <[email protected]> <[email protected]>

I think it would be a good idea to repost this is reddit.com/r/networking

Tim

Sent from ProtonMail mobile

-------- Original Message --------
On Sep 2, 2018, 10:43 PM, Tarko Tikan wrote:

> hey,
>
>> But why did the TLS Hello has a TTL lower that the TCP Syn ?
>>
>> Do you have any information on that ?
>
> Consumer CPEs are typically some BCM reference design where initial TCP
> handshake is handled by linux kernel and everything following (including
> NAT) is handled in SOC.
>
> I've seen those systems not decrement TTL at all, decrement TTL before
> checking if packet is destined to itself etc. This case is weird as
> typically the hardware part is faulty, not the kernel.
>
> --
> tarko
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180902/d3ed8fb4/attachment.html>

• References:
  • Service provider story about tracking down TCP RSTs
    • From: frnkblk at iname.com (frnkblk at iname.com)
  • Service provider story about tracking down TCP RSTs
    • From: garrett at skjelstad.org (Garrett Skjelstad)
  • Service provider story about tracking down TCP RSTs
    • From: jwbensley at gmail.com (James Bensley)
  • Service provider story about tracking down TCP RSTs
    • From: nanog at jack.fr.eu.org (nanog at jack.fr.eu.org)
  • Service provider story about tracking down TCP RSTs
    • From: tarko at lanparty.ee (Tarko Tikan)

• Prev by Date: Service provider story about tracking down TCP RSTs
• Next by Date: Netflix - wide ranges of wrongly blocked IP ranges
• Previous by thread: Service provider story about tracking down TCP RSTs
• Next by thread: Service provider story about tracking down TCP RSTs
• Index(es):
  • Date
  • Thread