Fedora Users — www.edirectory.co.uk -> TCP stack problem?

Good morning All.

I've recently noticed an odd problem with accessing www.edirectory.co.uk

On all of my FC2 machines here, we recently stopped being able to access
the above site. Via Firefox, Mozilla, elinks. All of them fail saying
document contains no data.

I have used tcpdump host www.edirectory.co.uk both on the client and
firewall to try and get a better idea of what is going on, and I used
ethereal on the client. Below is what I get.

Firewall
--------
11:11:27.584098 192.168.0.181.34506 > www.edirectory.co.uk.http: S
1062279754:1062279754(0) win 5840 <mss 1460,sackOK,timestamp 62570253
0,nop,wscale 7> (DF)
11:11:27.605934 www.edirectory.co.uk.http > 192.168.0.181.34506: S
4164346285:4164346285(0) ack 1062279755 win 17520 <mss 1460,nop,wscale
0,nop,nop,timestamp 0 0,nop,nop,sackOK> (DF)
11:11:27.606108 192.168.0.181.34506 > www.edirectory.co.uk.http: . ack 1
win 46 <nop,nop,timestamp 62570275 0> (DF)
11:11:27.606482 192.168.0.181.34506 > www.edirectory.co.uk.http: P 1:452
(451) ack 1 win 46 <nop,nop,timestamp 62570275 0> (DF)
11:11:27.828597 192.168.0.181.34506 > www.edirectory.co.uk.http: P 1:452
(451) ack 1 win 46 <nop,nop,timestamp 62570497 0> (DF)
11:11:27.864180 www.edirectory.co.uk.http > 192.168.0.181.34506: . ack
452 win 17069 <nop,nop,timestamp 11171953 62570497> (DF)

Client
------
11:03:33.441591 IP 192.168.0.181.34506 > www.edirectory.co.uk.http: S
1062279754:1062279754(0) win 5840 <mss 1460,sackOK,timestamp 62570253
0,nop,wscale 7>
11:03:33.463543 IP www.edirectory.co.uk.http > 192.168.0.181.34506: S
4164346285:4164346285(0) ack 1062279755 win 17520 <mss 1460,nop,wscale
0,nop,nop,timestamp 0 0,nop,nop,sackOK>
11:03:33.463604 IP 192.168.0.181.34506 > www.edirectory.co.uk.http: .
ack 1 win 46 <nop,nop,timestamp 62570275 0>
11:03:33.463836 IP 192.168.0.181.34506 > www.edirectory.co.uk.http: P
1:452(451) ack 1 win 46 <nop,nop,timestamp 62570275 0>
11:03:33.684898 IP 192.168.0.181.34506 > www.edirectory.co.uk.http: P
1:452(451) ack 1 win 46 <nop,nop,timestamp 62570497 0>
11:03:33.721780 IP www.edirectory.co.uk.http > 192.168.0.181.34506: .
ack 452 win 17069 <nop,nop,timestamp 11171953 62570497>

Ethereal Output (attached).

I am currently running kernel 2.6.8-1.521

We have tested access to the site on both windows and FC1 fully updated
and the site comes up fine.

The ethereal output seems to suggest that it feels the TCP sequence is
"wrong", and the two tcpdump outputs heavily suggest there is a problem
on our end. 

So far I have tried the following kernels, which allow me to access the
site.
2.6.5-1.358
2.6.6-1.427
2.6.6-1.435
2.6.6-1.435.2.1
2.6.6-1.435.2.3
2.6.8-1.541

So far I have tried the following kernels, which do NOT allow me to
access the site.
2.6.7-1.494.2.2
2.6.8-1.521

Now I can see that with the new kernel in Rawhide/Dev doesn't appear to
have the problem.

Should I just leave things for now, and install the rawhide kernel on
machines that REALLY need this function to work, or are there any
chances that some thing like this could be fixed in the FC2 kernels?
-- 
Douglas Furlong
Systems Administrator
Firebox.com
T: 0870 420 4475        F: 0870 220 2178

ÔÃ²¡ÿÿã?ZAI>JJ³žËjPÚAÖ[E<öE@@~xÀšµÙ+??ËPEù?? Ð?Ž
ŒnÊã?ZAæÏNNPÚAÖ[³žËjE@©]@y?\Ù+?ÀšµP?ËQAÃÜEù??°Dp°¿Ž
ã?ZAÐBB³žËjPÚAÖ[E4öF@@~ÀšµÙ+??ËPEù??QAÃÝ?.Ã!
Œnïã?ZA}Ò³žËjPÚAÖ[E÷öG@@|»ÀšµÙ+??ËPEù??QAÃÝ?.Çç
ŒnðGET / HTTP/1.1
Host: www.edirectory.co.uk
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040808 Firefox/0.9.3
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-gb,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: kelkooID=aa143e-feb5336500-53d1

ä?ZAv-³žËjPÚAÖ[E÷öH@@|ºÀšµÙ+??ËPEù??QAÃÝ?.Çç
ŒoÝGET / HTTP/1.1
Host: www.edirectory.co.uk
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040808 Firefox/0.9.3
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-gb,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: kelkooID=aa143e-feb5336500-53d1

ä?ZAÙBBPÚAÖ[³žËjE4©Þ@y?çÙ+?ÀšµP?ËQAÏ-Eù?S?Bõ4
ª|ÂŒoÝ

Attachment: signature.asc
Description: This is a digitally signed message part