[freebsd] l2tp за NAT'ом (без IPSEC)

[Irina Liakh]

On Wed, Apr 12, 2017 at 10:49:24PM +0700, Eugene Grosbein wrote:
> В студию вывод команд uptime и netstat -sp tcp

# uptime
 7:05PM  up  8:26, 7 users, load averages: 0.40, 0.36, 0.29

# netstat -sp tcp
tcp:
        47279 packets sent
                21066 data packets (4318440 bytes)
                55 data packets (15908 bytes) retransmitted
                3 data packets unnecessarily retransmitted
                0 resends initiated by MTU discovery
                24940 ack-only packets (8996 delayed)
                0 URG only packets
                0 window probe packets
                86 window update packets
                1132 control packets
        54765 packets received
                19677 acks (for 4300041 bytes)
                5904 duplicate acks
                0 acks for unsent data
                39298 packets (18835708 bytes) received in-sequence
                65 completely duplicate packets (30637 bytes)
                1 old duplicate packet
                0 packets with some dup. data (0 bytes duped)
                289 out-of-order packets (227097 bytes)
                0 packets (0 bytes) of data after window
                0 window probes
                9 window update packets
                74 packets received after close
                65 discarded for bad checksums
                0 discarded for bad header offset fields
                0 discarded because packet too short
                0 discarded due to memory problems
        580 connection requests
        0 connection accepts
        0 bad connection attempts
        0 listen queue overflows
        0 ignored RSTs in the windows
        568 connections established (including accepts)
        574 connections closed (including 12 drops)
                477 connections updated cached RTT on close
                478 connections updated cached RTT variance on close
                35 connections updated cached ssthresh on close
        4 embryonic connections dropped
        18671 segments updated rtt (of 17914 attempts)
        148 retransmit timeouts
                0 connections dropped by rexmit timeout
        0 persist timeouts
                0 connections dropped by persist timeout
        0 Connections (fin_wait_2) dropped because of timeout
        5632 keepalive timeouts
                5622 keepalive probes sent
                10 connections dropped by keepalive
        6264 correct ACK header predictions
        28170 correct data packet header predictions
        0 syncache entries added
                0 retransmitted
                0 dupsyn
                0 dropped
                0 completed
                0 bucket overflow
                0 cache overflow
                0 reset
                0 stale
                0 aborted
                0 badack
                0 unreach
                0 zone failures
        0 cookies sent
        0 cookies received
        128 hostcache entries added
                0 bucket overflow
        1 SACK recovery episode
        1 segment rexmit in SACK recovery episodes
        44 byte rexmits in SACK recovery episodes
        20 SACK options (SACK blocks) received
        219 SACK options (SACK blocks) sent
        0 SACK scoreboard overflow
        0 packets with ECN CE bit set
        0 packets with ECN ECT(0) bit set
        0 packets with ECN ECT(1) bit set
        0 successful ECN handshakes
        0 times ECN reduced the congestion window
        0 packets with valid tcp-md5 signature received
        0 packets with invalid tcp-md5 signature received
        0 packets with tcp-md5 signature mismatch
        0 packets with unexpected tcp-md5 signature received
        0 packets without expected tcp-md5 signature received