James:
Yes, these are FC2 kernels, v 2.6.7 something, 494 I think. Thanks for the idea, but for reasons of our own I need to keep these servers on "stock" packages, updates & such from official fedora sources. company policy and all. If it were a machine at home, I'd compile kernel source in a heartbeat.
I'll have some tethereal output for y'all in just a minute. Test: download webmin's tgz from the UMN mirror (or any mirror if UMN is unreachable). Just noticed something - a bunch of DUP ACK entries from my local box to the one I'm DL'ing from, and I noticed that the download starts with [TCP ZeroWindow]. I'm going to test this against a local LAN file transfer and see if the same behavior exists. Back in a bit.
On the /var/log/messages output, I'm seeing 2 things I haven't seen before that may be relevant. Eth0 (single nic machine) keeps jumping in & out of promiscuous mode - don't know if that's normal or not. #2 is that many entries have a timestamp that is exactly 5 hours ahead of local time, ie, ahead of all other entries (GMT format maybe? I'm in CDT). All such entries are dns lookups. could be normal behavior, I don't know.
James Wilkinson wrote:
John Krische wrote:
Are you running FC2 kernels? What happens if you compile one from kernel.org and try that?
James.
-- John K.