Topic: Treason uncloaked!

[windy]

Has anyone seen this appearing in their message log?

kernel: TCP: Treason uncloaked! Peer 195.166.237.254:3638/80 shrinks window 1399627359:1399627360. Repaired.
kernel: TCP: Treason uncloaked! Peer 195.166.237.254:3711/80 shrinks window 1393601948:1393601949. Repaired.
kernel: TCP: Treason uncloaked! Peer 195.166.237.254:3638/80 shrinks window 1399627359:1399627360. Repaired.
kernel: TCP: Treason uncloaked! Peer 195.166.237.254:3711/80 shrinks window 1393601948:1393601949. Repaired.
kernel: TCP: Treason uncloaked! Peer 195.166.237.254:13372/80 shrinks window 1475316991:1475316992. Repaired.

The only change to the server was the installation yesterday of smeserver-qpsmtpd-1.2.1-43.el4.sme to smeserver-qpsmtpd-1.2.1-47.el4.sme
I was having the problem described in http://forums.contribs.org/index.php?topic=38555.0. This solved the hanging connections problem, but then this appeared in the logs this morning. A google shows mixed results and what seems to be a lack of clarity as to what it is and what to do about it. I don't see anything in the update of yesterday that would relate to this error, so it may just be a coincidence.

Thanks

[Elliott]

Google searched and found similar messages across multiple kernels...

http://kerneltrap.org/node/7182

[windy]

Hi Elliot,

As I said in my initial message, it appears that there is a lot of confusion on this issue at kerneltrap and other sites as well. I had seen these messages previously as well as many others. Some say that it is a problem, others say it is just the kernel doing what it should do. Others have written entire programs to rewrite their iptables script every time they receive one of these messages in their logs. Just reading the kerneltrap messages at the link you provided shows a wide disparity of opinion.

Thanks anyway,

Steve

[chris burnat]

Windy,  If you have time, could you post a bug report at Bugzilla about this unusual entry in your logs.  This will ensure that the problem is identified and documented for the record and for search purposes (FAQ?).  Posts in the forum tend to get lost after a while. 
Thanks
chris.

Edited: fix spellos...