Where can I find a log or settings on my sco 5.0.5 box to find out why is
that when somebody tries to ftp in this machine it takes sometimes a couple
of seconds and some times it's instantaneously and worse times it just drops
the connection and leaves an fptd process running. How come on the same
machine all incoming telnet connections are 100% completed and fast when
given the login ???

I installed a windoze network sniffer on the same network where the ftp
calling party is, but it doesn't tell me much.

I'm running a cron-like process on a windows machine that ftp's to the sco
box every five minutes looking for a file to process some information but
then it hangs when sco box timesout and I have to manually hit enter on the
windows computer in order to clear the message. So If I'm gone and a message
pops up then it does nothing until you clear the error.

Thanks

On Fri, 03 Oct 2003 18:08:46 GMT, "Enrique Arredondo"
<atk@sbcglobal.net> wrote:

>Where can I find a log or settings on my sco 5.0.5 box to find out why is
>that when somebody tries to ftp in this machine it takes sometimes a couple
>of seconds and some times it's instantaneously and worse times it just drops
>the connection and leaves an fptd process running.

/var/adm/xferlog


BTW, is telnet slow too?
--
gburnore at DataBasix dot Com
---------------------------------------------------------------------------
How you look depends on where you go.
---------------------------------------------------------------------------
Gary L. Burnore | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
Official .sig, Accept no substitutes. | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ 0 1 7 2 3 / Ý³Þ 3 7 4 9 3 0 Û³
Black Helicopter Repair Services, Ltd.| Official Proof of Purchase
================================================== =========================

"Gary L. Burnore" <gburnore@databasix.com> wrote in message
news:blkfh6$g0q$5@blackhelicopter.databasix.com...
> On Fri, 03 Oct 2003 18:08:46 GMT, "Enrique Arredondo"
> <atk@sbcglobal.net> wrote:
>
> >Where can I find a log or settings on my sco 5.0.5 box to find out why is
> >that when somebody tries to ftp in this machine it takes sometimes a
couple
> >of seconds and some times it's instantaneously and worse times it just
drops
> >the connection and leaves an fptd process running.
>
> /var/adm/xferlog
>
>
> BTW, is telnet slow too?

It's not, telnet is fast!, I watched the ftp transaction more closely and
it's hanging (20% of the times) right after the command "get FILENAME" the
it responds back with "200 ......" and then that's it, it stays like that
without receiving any file and after 20 seconds the windows ftp just closes
automatically. But other times it does transfer no problem. It seems that
this is an intermittent problem.

Thanks
EA

On Fri, 03 Oct 2003 18:08:46 GMT, "Enrique Arredondo"
<atk@sbcglobal.net> wrote:

>Where can I find a log or settings on my sco 5.0.5 box to find out why is
>that when somebody tries to ftp in this machine it takes sometimes a couple

Take a look through /var/adm/syslog, and possibly /var/adm/xferlog (if
you have enabled logging in /etc/ftpaccess). You may find an
indication of the problem in there.

>of seconds and some times it's instantaneously and worse times it just drops
>the connection and leaves an fptd process running. How come on the same
>machine all incoming telnet connections are 100% completed and fast when
>given the login ???

Do you have the 5.0.5 patches installed, specifically rs505a and
oss497c? (type customquery listpatches | head -2) Incorrect DNS
settings? Are you FTPing/telnetting by name or IP address?

>
>I installed a windoze network sniffer on the same network where the ftp
>calling party is, but it doesn't tell me much.
>
>I'm running a cron-like process on a windows machine that ftp's to the sco
>box every five minutes looking for a file to process some information but
>then it hangs when sco box timesout and I have to manually hit enter on the
>windows computer in order to clear the message. So If I'm gone and a message
>pops up then it does nothing until you clear the error.

Using FTP from the Windoze command line, or a third-party product?
And does telnet work properly on this Windoze machine?

>
>Thanks
>


Scott McMillan

On Fri, 3 Oct 2003, Enrique Arredondo wrote:

> Where can I find a log or settings on my sco 5.0.5 box to find out why is
> that when somebody tries to ftp in this machine it takes sometimes a couple
> of seconds and some times it's instantaneously and worse times it just drops
> the connection and leaves an fptd process running. How come on the same
> machine all incoming telnet connections are 100% completed and fast when
> given the login ???

Could it be the inetd waiting for an ident reply? In some cases, a reply
is sent, in other cases, the ident query is rejected and finally, in
others, the ident query is silently dropped. In the latter case, the inetd
may wait for a timeout period.

In article <OWifb.11349$IE1.7715@newssvr25.news.prodigy.com >,
Enrique Arredondo <atk@sbcglobal.net> wrote:

>Where can I find a log or settings on my sco 5.0.5 box to find
>out why is that when somebody tries to ftp in this machine
>it takes sometimes a couple of seconds and some times it's
>instantaneously and worse times it just drops the connection and
>leaves an fptd process running. How come on the same machine all
>incoming telnet connections are 100% completed and fast when
>given the login ???

So some questions. Are the ftp sessions from a local LAN, or from
the internet where the far end is broadband, or with the far end
on dial-up?

With telnet always fast and ftp slow on some connections it
sounds like it could be packet sizes on one of the machines are set
too high and thus have to be split. Ftp is going to use large
segments while telnet is going to be using quite small packets.

This is just a thought. You might try dropping your MTU down to
20-30 bytes below 1500 in case some machine isn't correctly
dropping them down. And if any of these are using dialup to access
the net you might check to see if the MTU is about 552.

This may be way off base, but it's worth checking.

Bill

--
Bill Vermillion - bv @ wjv . com

On Sat, Oct 04, 2003, Bill Vermillion wrote:
>In article <OWifb.11349$IE1.7715@newssvr25.news.prodigy.com >,
>Enrique Arredondo <atk@sbcglobal.net> wrote:
>
>>Where can I find a log or settings on my sco 5.0.5 box to find
>>out why is that when somebody tries to ftp in this machine
>>it takes sometimes a couple of seconds and some times it's
>>instantaneously and worse times it just drops the connection and
>>leaves an fptd process running. How come on the same machine all
>>incoming telnet connections are 100% completed and fast when
>>given the login ???
>
>So some questions. Are the ftp sessions from a local LAN, or from
>the internet where the far end is broadband, or with the far end
>on dial-up?
>
>With telnet always fast and ftp slow on some connections it
>sounds like it could be packet sizes on one of the machines are set
>too high and thus have to be split. Ftp is going to use large
>segments while telnet is going to be using quite small packets.

Usually slow ftp connections are caused by slow DNS or missing reverse DNS
(rDNS), particularly using the wu-ftpd ftp server configured to require
some rDNS for a connection.

Bill
--
INTERNET: bill@Celestial.COM Bill Campbell; Celestial Software LLC
UUCP: camco!bill PO Box 820; 6641 E. Mercer Way
FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

``There is nothing as stupid as an educated man if you get him off the
thing he was educated in.''
Will Rogers

In article <20031004010016.GA15493@alexis.mi.celestial.com> ,
Bill Campbell <bill@celestial.com> wrote:
>On Sat, Oct 04, 2003, Bill Vermillion wrote:
>>In article <OWifb.11349$IE1.7715@newssvr25.news.prodigy.com >,
>>Enrique Arredondo <atk@sbcglobal.net> wrote:

>>>Where can I find a log or settings on my sco 5.0.5 box to find
>>>out why is that when somebody tries to ftp in this machine
>>>it takes sometimes a couple of seconds and some times it's
>>>instantaneously and worse times it just drops the connection and
>>>leaves an fptd process running. How come on the same machine all
>>>incoming telnet connections are 100% completed and fast when
>>>given the login ???
>>
>>So some questions. Are the ftp sessions from a local LAN, or from
>>the internet where the far end is broadband, or with the far end
>>on dial-up?
>>
>>With telnet always fast and ftp slow on some connections it
>>sounds like it could be packet sizes on one of the machines are set
>>too high and thus have to be split. Ftp is going to use large
>>segments while telnet is going to be using quite small packets.

>Usually slow ftp connections are caused by slow DNS or missing
>reverse DNS (rDNS), particularly using the wu-ftpd ftp server
>configured to require some rDNS for a connection.

I understood him to mean that the ftp transfers were slow after
establishing the connections, not setting up the connection.

If it was setting up the connections then it is related to DNS.
If it's slow transfers I'd still check the MTU settings, as that
has been a problem in differences.

Bill


--
Bill Vermillion - bv @ wjv . com

On Fri, 03 Oct 2003 18:08:46 GMT, "Enrique Arredondo"
<atk@sbcglobal.net> wrote:

>Where can I find a log or settings on my sco 5.0.5 box to find out why is
>that when somebody tries to ftp in this machine it takes sometimes a couple
>of seconds and some times it's instantaneously and worse times it just drops
>the connection and leaves an fptd process running. How come on the same
>machine all incoming telnet connections are 100% completed and fast when
>given the login ???
>
>I installed a windoze network sniffer on the same network where the ftp
>calling party is, but it doesn't tell me much.
>
>I'm running a cron-like process on a windows machine that ftp's to the sco
>box every five minutes looking for a file to process some information but
>then it hangs when sco box timesout and I have to manually hit enter on the
>windows computer in order to clear the message. So If I'm gone and a message
>pops up then it does nothing until you clear the error.
>
>Thanks

Sigh. 3 paragraphs and the only useful number is the version number.
Time for a rhetorical interrogation.

1. Is this 10base-T, 100base-TX, or 100base-T4? Half or full duplex?
What ethernet card (make and model)? There are a few cards that do a
rotten job of NWAY speed and protocol negotiation and require that the
space.c file for the ethernet card be tweaked to disable
auto-negotiation.

2. Are there any routers, firewalls, hubs, switches, bridges, modems,
bridges, media converters, black boxes, or two tin cans and a string,
between the OSR5 box and the "somebody" that tries to ftp to the
machine? Just where on this network is this "somebody". Would they
perhaps be coming from the internet (via a DSL, T1, ISDN, modem,
frame-relay, etc) connection that just might require optimization of
the maximum default receive window? This is especially a problem with
10baseT cards in OSR5 boxes that non-cleverly default to a 4KByte
receive window. See:

http://www.google.com/groups?selm=dk...052n@4ax .com
for my previous rant on the subject.

3. Have you looked for packet loss? Try:
netstat -n -e
and
llistat
and look for errors after a massive ftp transfer.

4. Since you have a sniffer, see if there are any massive number of
retransmissions. That usually indicates some kind of a hardware or
packet loss issue.

5. My guess(tm) the reason that telnet works, but ftp fails, is
because of either the packet size issue, or the max receive window
issue. Telnet packets are very small and are not susceptible to the
same performance issues found in services that more bytes in larger
chunks than telnet.

Good luck.
--
# Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
# 831.336.2558 voice http://www.LearnByDestroying.com
# jeffl@comix.santa-cruz.ca.us
# 831.421.6491 digital_pager jeffl@cruzio.com AE6KS

On Fri, 03 Oct 2003 18:08:46 GMT, "Enrique Arredondo" <atk@sbcglobal.net> wrote:

>Where can I find a log or settings on my sco 5.0.5 box to find out why is
>that when somebody tries to ftp in this machine it takes sometimes a couple
>of seconds and some times it's instantaneously and worse times it just drops
>the connection and leaves an fptd process running. How come on the same
>machine all incoming telnet connections are 100% completed and fast when
>given the login ???
>
>I installed a windoze network sniffer on the same network where the ftp
>calling party is, but it doesn't tell me much.
>
>I'm running a cron-like process on a windows machine that ftp's to the sco
>box every five minutes looking for a file to process some information but
>then it hangs when sco box timesout and I have to manually hit enter on the
>windows computer in order to clear the message. So If I'm gone and a message
>pops up then it does nothing until you clear the error.
>
>Thanks
>
If your FTP is slow at logging in you can disable the reverse lookup by adding a
line in the /etc/ftpaccess file:

timeout RFC931 0

Gary Quiring