From sec@matrix.42.org  Wed Jan 21 09:32:00 1998
Received: from matrix.42.org (sec@matrix.42.org [192.68.213.129])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA14022
          for <FreeBSD-gnats-submit@freebsd.org>; Wed, 21 Jan 1998 09:31:56 -0800 (PST)
          (envelope-from sec@matrix.42.org)
Received: (from sec@localhost)
	by matrix.42.org (8.8.8/8.8.6) id SAA16527
	(sender <sec>); Wed, 21 Jan 1998 18:31:27 +0100 (CET)
Message-Id: <199801211731.SAA16527@matrix.42.org>
Date: Wed, 21 Jan 1998 18:31:27 +0100 (CET)
From: Stefan `Sec` Zehl <sec@42.org>
Reply-To: sec@42.org
To: FreeBSD-gnats-submit@freebsd.org
Subject: ftp problems with ftp.freebsd.org ? "Transfer aborted. Data connection closed"
X-Send-Pr-Version: 3.2

>Number:         5539
>Category:       misc
>Synopsis:       ftp problems with ftp.freebsd.org ? "Transfer aborted. Data connection closed"
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          support
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jan 21 09:40:01 PST 1998
>Closed-Date:    Tue Dec 8 20:03:35 PST 1998
>Last-Modified:  Tue Dec  8 20:04:12 PST 1998
>Originator:     Stefan `Sec` Zehl
>Release:        FreeBSD 2.2.5-STABLE i386
>Organization:
>Environment:


my 2.2.5-STABLE box, connected to the internet via an ppp link on an
2.2-STABLE box.

>Description:

I tried to fetch a file from ftp.feebsd.org with ncftp2:
matrix:~/src/picobsd>ncftp2 ftp://ftp.freebsd.org/pub/FreeBSD/incoming/picoBSD/
NcFTP 2.4.2 (October 28, 1996), by Mike Gleason, NCEMRSoft.
[...]
Guest login ok, access restrictions apply.
freebsd:/.25/FreeBSD/incoming/picoBSD> dir
total 5360
-rwxr-xr--  1 201  ftp-Free  1352017 Jan 16 07:05 pb_en-01.zip
-rwxr-xr--  1 201  ftp-Free  1360117 Jan 20 04:41 pb_n-01.zip
[...]
freebsd:/.25/FreeBSD/incoming/picoBSD> get pb_n-01.zip
Receiving file: pb_n-01.zip
 16%  0 ======>                                      1360117 bytes. ETA: 42:38Error: Error occurred during read!
Reason: Operation timed out
** Aborting Transfer **
Transfer aborted. Data connection closed.
 16%  0 ======>                                      1360117 bytes. ETA: 79:08
pb_n-01.zip:  16060 bytes received and appended to existing file in 67.52 seconds, 237.84 Bytes/s.
freebsd:/.25/FreeBSD/incoming/picoBSD> 

The tcpdump trace of the above conection:

quit:~#tcpdump host ftp.freebsd.org
tcpdump: listening on ed0
18:21:52.884081 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 3541620027:3541621487(1460) ack 1390656383 win 17520 [tos 0x8]
18:21:53.026812 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 1460 win 17520 (DF)
18:21:54.120477 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 2920:4380(1460) ack 1 win 17520 [tos 0x8]
18:21:54.122614 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 1460 win 17520 (DF)
18:21:54.517145 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 1460:2920(1460) ack 1 win 17520 [tos 0x8]
18:21:54.519407 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 4380 win 14600 (DF)
18:21:54.519963 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 4380 win 17520 (DF)
18:21:55.581231 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 4380:5840(1460) ack 1 win 17520 [tos 0x8]
18:21:55.630923 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 5840 win 17520 (DF)
18:21:55.964366 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 5840:7300(1460) ack 1 win 17520 [tos 0x8]
18:21:56.030874 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 7300 win 17520 (DF)
18:21:56.355895 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 7300:8760(1460) ack 1 win 17520 [tos 0x8]
18:21:56.430861 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 8760 win 17520 (DF)
18:21:56.739628 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 8760:10220(1460) ack 1 win 17520 [tos 0x8]
18:21:56.830617 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 10220 win 17520 (DF)
18:21:57.889604 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 13140:14600(1460) ack 1 win 17520 [tos 0x8]
18:21:57.891771 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 10220 win 17520 (DF)
18:22:02.901182 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 10220:11680(1460) ack 1 win 17520 [tos 0x8]
18:22:02.903494 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 11680 win 16060 (DF)
18:22:03.767776 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 13140:14600(1460) ack 1 win 17520 [tos 0x8]
18:22:03.769936 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 11680 win 17520 (DF)
18:22:14.737036 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 11680:13140(1460) ack 1 win 17520 [tos 0x8]
18:22:14.739107 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 14600 win 14600 (DF)
18:22:14.739772 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 14600 win 17520 (DF)
18:22:16.252151 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 14600:16060(1460) ack 1 win 17520 [tos 0x8]
18:22:16.429937 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 16060 win 17520 (DF)
18:22:17.823989 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 17520:18980(1460) ack 1 win 17520 [tos 0x8]
18:22:17.826079 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 16060 win 17520 (DF)
18:22:18.593979 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 18980:20440(1460) ack 1 win 17520 [tos 0x8]
18:22:18.595965 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: . ack 16060 win 17520 (DF)
18:22:46.272422 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: F 1:1(0) ack 16060 win 17520 (DF)
18:22:46.727254 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . ack 2 win 17520 [tos 0x8]
18:22:46.943203 matrix.42.org.4652 > wcarchive.cdrom.com.ftp: P 1276588501:1276588504(3) ack 2759265595 win 17520 (DF)
18:22:46.943577 matrix.42.org.4652 > wcarchive.cdrom.com.ftp: P 3:4(1) ack 1 win 17520 urg 1 (DF)
18:22:46.944241 matrix.42.org.4652 > wcarchive.cdrom.com.ftp: P 4:10(6) ack 1 win 17520 (DF)
18:22:47.330135 wcarchive.cdrom.com.ftp > matrix.42.org.4652: . ack 10 win 17514 [tos 0x10]
18:22:47.352635 wcarchive.cdrom.com.ftp > matrix.42.org.4652: . ack 3 win 17517 [tos 0x10]
18:22:47.389933 wcarchive.cdrom.com.ftp > matrix.42.org.4652: P 1:48(47) ack 10 win 17520 [tos 0x10]
18:22:47.424379 matrix.42.org.4652 > wcarchive.cdrom.com.ftp: . ack 48 win 17520 (DF)
18:22:47.861348 wcarchive.cdrom.com.ftp > matrix.42.org.4652: P 48:70(22) ack 10 win 17520 [tos 0x10]
18:22:48.029275 matrix.42.org.4652 > wcarchive.cdrom.com.ftp: . ack 70 win 17520 (DF)
18:23:18.435457 wcarchive.cdrom.com.ftp-data > matrix.42.org.4660: . 16060:17520(1460) ack 2 win 17520 [tos 0x8]
18:23:18.437896 matrix.42.org.4660 > wcarchive.cdrom.com.ftp-data: R 1390656384:1390656384(0) win 0


	

>How-To-Repeat:

fetch a file ? - see above :-)

>Fix:
	
I don't know. Is there anything else i can do for debugging ? 
>Release-Note:
>Audit-Trail:

From: Bill Fenner <fenner@parc.xerox.com>
To: sec@42.org
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: misc/5539: ftp problems with ftp.freebsd.org ? "Transfer aborted. Data connection closed" 
Date: Wed, 21 Jan 1998 10:10:32 PST

 There are two strange things about that tcpdump:
 1. There are a lot of retransmitted packets.  It looks like there's a lot
 of loss between you and ftp.freebsd.org .  What does "ping" say?
 2. The connection was closed cleanly by your end, implying that ncftp
 was the one that closed the connection.  Does ncftp have a timeout?
 Have you tried setting it larger?
 
   Bill

From: Stefan `Sec` Zehl <sec@42.org>
To: Bill Fenner <fenner@parc.xerox.com>
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: misc/5539: ftp problems with ftp.freebsd.org ? "Transfer aborted. Data connection closed"
Date: Fri, 23 Jan 1998 18:20:15 +0100

 On Wed, Jan 21, 1998 at 10:10:32AM -0800, Bill Fenner wrote:
 > There are two strange things about that tcpdump:
 > 1. There are a lot of retransmitted packets.  It looks like there's a lot
 > of loss between you and ftp.freebsd.org .  What does "ping" say?
 
 --- wcarchive.cdrom.com ping statistics ---
 100 packets transmitted, 67 packets received, 33% packet loss
 round-trip min/avg/max/stddev = 388.462/656.853/2237.680/393.681 ms
 
 > 2. The connection was closed cleanly by your end, implying that ncftp
 > was the one that closed the connection.  Does ncftp have a timeout?
 > Have you tried setting it larger?
 
 I tried it again with "fetch" and it worked that time, so i suspect some
 problem in ncftp :)
 
 - thanks for your help, keep up that good work.
 
 CU,
     Sec
 -- 
 Eighty megabytes and continuosly swapping
 Escape Meta Alt Control Shift
 Emacs makes all computers slow
                   --  So better go to http://www.math.fu-berlin.de/~guckes/vim/
State-Changed-From-To: open->closed 
State-Changed-By: billf 
State-Changed-When: Tue Dec 8 20:03:35 PST 1998 
State-Changed-Why:  
Pilot error. Was never really a FreeBSD problem, 
>Unformatted:
