[Ecn-sane] Meanwhile, over on NANOG...
Toke Høiland-Jørgensen
toke at toke.dk
Wed Nov 13 10:35:15 EST 2019
"Rodney W. Grimes" <4bone at gndrsh.dnsmgr.net> writes:
>> -t is the TOS value; so those two happen to correspond to ECT(1) and
>> ECT(0); and as you can see they go two different paths. Which would be
>> consistent with the SYN going one way and the data packets going
>> another.
>
> Perhaps Old enough that maybe they are treating that as TOS byte?
>
> Looks like you have nailed it though, someone has a broken hash.
Yup, seems like it. Posted a writeup to the NANOG list in response to
the guy asking; it hasn't showed up in the archive, though, so I guess
it's still in the moderation queue.
I think I'll write the whole thing up as a blog post as well, once it's
resolved. I'll see if I can get them to tell me which router make and
model is doing this.
Thanks everyone who helped with ideas etc! :)
-Toke
More information about the Ecn-sane
mailing list