View Single Post
Old 19th December 2009
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default

With pfctl you can check whether TCP window scaling is being used
Code:
# pfctl -vvss

all tcp 192.168.222.10:22 <- 192.168.222.20:32167       ESTABLISHED:ESTABLISHED
   [1530147851 + 65487] wscale 0  [761161648 + 17376] wscale 0
   age 00:06:59, expires in 24:00:00, 621:1038 pkts, 38500:213184 bytes, rule 22
   id: 8990c04a75d43300 creatorid: 9f30c773
So in this SSH connection from my desktop 192.*20 to my router 192.*10 both communication endpoints negotiated a window scaling factor of 0, so none
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote