[BUGS] Strange NIC behavior

[Jerahmy Pocott]

On 14/01/2008, at 12:40 PM, Callum Gibson wrote:

> Only if someone is attacking you at regular intervals. How about the
> interval between the 4 minute pair? Is that regular too?  Since you  
> have
> 4 minutes warning, when you see the first pair, start up some  
> monitoring
> like a tcpdump and see what happens on that interface when the  
> interface
> bounces again. Maybe some other information like "netstat -s" might  
> tell
> you if something weird is going on with the network (like excessive
> dropped or error packets).

The interval between the pair is only regular in that it's always more  
than an hour before it happens again.. Other than that no real pattern  
I can see..

The only odd numbers I'm seeing are:

Sent:
4281259 ack-only packets (148833 delayed)
193054 window update packets

Recv:
1409 connection requests
47064 connection accepts
234 bad connection attempts

How is it that I have 47064 accepts and only 1409 requests?!

Other than that all looks fairly normal..