[Sysadmins] rsync

[Anton Gorlov]

Что-то на 1 из машинок за натом пее\рестал рабоать rsync вот с такими 
вот симптомами:

причём такое наблюдается только на 1 машинке из 5 с ~одинаковым набором 
правил в файрволле.

[root на rcc root]# tcpdump -vv -i vlan99 host ring.local
tcpdump: listening on vlan99, link-type EN10MB (Ethernet), capture size 
96 bytes
18:56:15.927695 IP (tos 0x0, ttl  64, id 4701, offset 0, flags [DF], 
proto 17, length: 65) ring.local.1197 > gw.local.domain: [udp sum ok] 
18355+ AAAA? security.debian.org. (37)
18:56:15.928583 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 
17, length: 119) gw.local.domain > ring.local.1197:  18355 q: AAAA? 
security.debian.org. 0/1/0 ns: debian.org. SOA[|domain]
18:56:15.928940 IP (tos 0x0, ttl  64, id 4703, offset 0, flags [DF], 
proto 17, length: 71) ring.local.1197 > gw.local.domain: [udp sum ok] 
10166+ AAAA? security.debian.org.local. (43)
18:56:15.929332 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 
17, length: 120) gw.local.domain > ring.local.1197:  10166 NXDomain* q: 
AAAA? security.debian.org.local. 0/1/0 ns: local. (92)
18:56:15.929569 IP (tos 0x0, ttl  64, id 4703, offset 0, flags [DF], 
proto 17, length: 65) ring.local.1197 > gw.local.domain: [udp sum ok] 
57143+ A? security.debian.org. (37)
18:56:15.929963 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 
17, length: 196) gw.local.domain > ring.local.1197:  57143 q: A? 
security.debian.org. 2/4/1 security.debian.org. A klecker.debian.org, 
[|domain]
18:56:15.930353 IP (tos 0x0, ttl  64, id 53404, offset 0, flags [DF], 
proto 6, length: 52) ring.local.rmiactivation > 
debian-mirror.mirror.umn.edu.rsync: S [tcp sum ok] 
2758525692:2758525692(0) win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 2>
18:56:16.116837 IP (tos 0x0, ttl  49, id 0, offset 0, flags [DF], proto 
6, length: 52) debian-mirror.mirror.umn.edu.rsync > 
ring.local.rmiactivation: S [tcp sum ok] 349897942:349897942(0) ack 
2758525693 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 9>
18:56:16.117021 IP (tos 0x0, ttl  64, id 53406, offset 0, flags [DF], 
proto 6, length: 40) ring.local.rmiactivation > 
debian-mirror.mirror.umn.edu.rsync: . [tcp sum ok] 1:1(0) ack 1 win 1460
18:56:16.117182 IP (tos 0x0, ttl  64, id 53408, offset 0, flags [DF], 
proto 6, length: 52) ring.local.rmiactivation > 
debian-mirror.mirror.umn.edu.rsync: P [tcp sum ok] 1:13(12) ack 1 win 1460
18:56:16.295918 IP (tos 0x0, ttl  49, id 12781, offset 0, flags [DF], 
proto 6, length: 40) debian-mirror.mirror.umn.edu.rsync > 
ring.local.rmiactivation: R [tcp sum ok] 1:1(0) ack 13 win 12
18:56:16.314671 IP (tos 0x0, ttl  49, id 12780, offset 0, flags [DF], 
proto 6, length: 40) debian-mirror.mirror.umn.edu.rsync > 
ring.local.rmiactivation: . [tcp sum ok] 1:1(0) ack 13 win 12
18:56:16.314792 IP (tos 0x0, ttl  64, id 179, offset 0, flags [DF], 
proto 6, length: 40) ring.local.rmiactivation > 
debian-mirror.mirror.umn.edu.rsync: R [tcp sum ok] 
2758525705:2758525705(0) win 0
18:56:20.927579 arp who-has ring.local tell gw.local
18:56:20.927733 arp reply ring.local is-at 00:50:22:8d:a4:6c

(дамп сделан на внутренне  интерфейсе роутера)

-- 
   np: silence ( Winamp ушел в Партизаны ;-)