Re: [tcpm] New I-D

Context is the draft - 
http://www.ietf.org/internet-drafts/draft-mahesh-persist-timeout-00.txt

John Heffner wrote:
> As proof of concept, I wrote up a simple script (I think only about 30 
> lines of python) that used the TCP ESTATS MIB to monitor connections, 
> and kill off ones making no progress while consuming the most memory. 
> This proved an effective defense against netkill, and I think would 
> solve the problem described in the draft as well.  It would be easy 
> enough to write a kernel thread to do the same if the system doesn't 
> do ESTATS.
>
>   -John
John,

The issue with Netkill or any other application trying to kill 
connections is that they cannot distinguish between connections that are 
held up because of network issues where packets are getting dropped and 
connections that are in persist state because the client refuses to open 
the zero window. TCP can distinguish between the connections and 
determine which ones need to go. Wouldn't you agree?

m/

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www1.ietf.org/mailman/listinfo/tcpm