Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

TCP bad checksum

Hi

Could someone inform me how a CSS 11500 handles a packet with TCP invalid checksum. I have two loadbalanced svrs behind a CSS and im seeing the and ACK with a bad checksum hitting the server VLAN interface of the CSS which appears to send RST 200 micro seconds later to the server but not to the client, Is this normal behaviour ?.

Thanks in advance

5 REPLIES
New Member

Re: TCP bad checksum

Hi

Ignore the previous, it looks like tcp checksum offloading is enabled and causing errors in Wireshark. But I still get RST from the CSS to a server withount one being transmitted to the client, any ideas ?

Cheers

Cisco Employee

Re: TCP bad checksum

idle timeout issue ?

Try to increase the 'flow-timeout-multiplier' under the content rule and group.

Gilles.

New Member

Re: TCP bad checksum

Giles

I don't think it is an idle timeout, it is using the default (16secs) and the reset happened after 10 seconds of the previous packet.

Stephen

Cisco Employee

Re: TCP bad checksum

Stephen,

don't look at the interval with just the last packet.

The CSS will mark a flow idle if the interval between 2 consecutives packet is bigger than the idle timeout.

At that time, no reset will be sent.

But during the garbage collection process, the CS may reclaim resources hold by connections that were marked idle.

Even if the connection was not idle anymore, the CSS will destroy it if it was marked idle anytime in the past.

Moreover, for http connection, the idle timeout is 8 sec and not 16.

Finally, you can also check with 'show dos' to see if the css consider the connection as illegal - which would trigger a reset as well.

Gilles.

New Member

Re: TCP bad checksum

Giles

Should both connections be torn down rather than just the connection to the server ?

Stephen

823
Views
0
Helpful
5
Replies