[OmniOS-discuss] strangeness ssh into omnios from oi_151a9

[Lauri Tirkkonen]

On Thu, Oct 01 2015 11:50:03 +0200, Richard PALO wrote:
> >>In that case, wouldn't setting tcp_tstamp_always on OI to '1' be better in
> >>this case (or would OI not honour that setting correctly)?
> >
> >It wouldn't work. From what I can tell, those ndd settings only affect
> >the SYN segments (ie.  timestamp negotiation); pre-5850 illumos will
> >always stop timestamping mid-connection if it receives a non-timestamped
> >segment.
> >
> 
> Okay, I set tcp_tstamp_if_wscale to 0 and it does seem to work fine.

Thanks, that pretty much confirms the issue is what I suspected it is.

> (Hoping there isn't any fallout from doing this now...)

As long as that middlebox has been mucking with your traffic in the way
it is, timestamps have been getting turned off mid-connection for your
pre-5850 box. I recommend you to ugprade to post-5850 if you can, or to
scream loudly at whoever is modifying your traffic :)

-- 
Lauri Tirkkonen | lotheac @ IRCnet