Re: schein.debian.org
Gerald Turner <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ipv6 |
|---|---|
| Message-ID | <[email protected]> |
Pascal Hambourg <[email protected]> writes: > Hello, > > Gerald Turner a écrit : >> >> wget http://security.debian.org/dists/squeeze/updates/Release >> hangs, while: >> wget http://security.debian.org/dists/squeeze/updates/Release.gpg >> succeeds. >> >> Running 'dig +trace security.debian.org AAAA' always returns the same >> address, >> security.debian.org. 300 IN AAAA 2001:4f8:8:36::6 >> which is schein.debian.org. > [...] >> Only wget to http://security.debian.org/dists/squeeze/updates/Release >> seems to fail (other files fail as well, Packages.gz, Sources.gz, >> etc.). >> >> Can anyone else confirm or deny IPv6 security updates mirror at >> schein.debian.org is operational > > It works for me. > Could it be an MTU/MSS/fragmentation issue ? Release is only 836 bytes > in size, which I believe can fit in one single packet. Other files > such as Release are bigger. Could you try again after lowering the MTU > of the interface (I use 1460) ? A packet capture may help too. > Indeed fetching the signature fits in a single packet where as Release is 37K. I've captured the packets, only odd thing that I can make of it is that the last packet from schein (after ^C in wget) has wireshark SEQ/ACK analysis of "A segment before this frame was lost". >> (virtual host, security.debian.org, makes this a bit difficult to >> test)? > > wget --header="Host: security.debian.org" > http://schein.debian.org/dists/squeeze/updates/Release Thanks for the tip. -- Gerald Turner Email: [email protected] JID: [email protected] GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5
schein.pcap
(application/cap, 3.1 KB) - not displayed
signature.asc
(application/pgp-signature, 197 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk3mn88ACgkQP6CBD/qM1tWoYQCeJq7xeNz4nqVRBlWwOve3PsbW jagAoK9dJbfkLim6cWJCzoimz3MJnRzC =Ak2E -----END PGP SIGNATURE-----