Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 273541 - Unable to connect to any google site
Summary: Unable to connect to any google site
Status: RESOLVED TEST-REQUEST
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: AMD64 Linux
: High major (vote)
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-06-10 12:08 UTC by Daniel Fleischman
Modified: 2009-07-15 23:07 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
wireshark file. Tried to access google.com and than gmail.com (google-gmail,3.67 KB, application/octet-stream)
2009-07-15 04:17 UTC, Daniel Fleischman
Details
Kernel configuration file (.config,49.87 KB, text/plain)
2009-07-15 12:59 UTC, Daniel Fleischman
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Fleischman 2009-06-10 12:08:21 UTC
I think this is really strange, but sometimes, after the computer is turned on for a while, I can't connect to any google site (google, gmail, youtube, ...).

If I go to another PC in my home (both my father's and my brother's use Ubuntu) I can do it fine, and if I reboot my PC I can connect also. If I wait for a while it is also possible to connect.

I can always ping google, but not always connect to it via any browser (I've tried firefox, opera, konqueror, epiphany, and even links, lynx, etc.)

I've also tried with several kernels. The genkernel one, a minimal one for my hardware, the Sabayon's... all of them had this same problem.

Well, I don't know what else to do :(

Thank you,
Daniel.
Comment 1 Marijn Schouten (RETIRED) gentoo-dev 2009-06-10 12:34:20 UTC
What error do your browsers produce?
Comment 2 Marijn Schouten (RETIRED) gentoo-dev 2009-06-10 12:35:18 UTC
and what is your "emerge --info"?
Comment 3 Daniel Fleischman 2009-06-10 12:40:08 UTC
(In reply to comment #1)
> What error do your browsers produce?
> 

Connection time out

(In reply to comment #2)
> and what is your "emerge --info"?
> 

Right now I have Sabayon installed, just to see if it worked on it, and it didn't. I don't have my "emerge --info" from my gentoo installation, but I will reinstall it today and tell you.

By the way, my "emerge --info" from Sabayon is:
Portage 2.2_rc33 (default/linux/amd64/2008.0/desktop, gcc-4.3.2, glibc-2.8_p20080602-r1, 2.6.29-gentoo-r5 x86_64)
=================================================================
System uname: Linux-2.6.29-gentoo-r5-x86_64-Intel-R-_Core-TM-2_Quad_CPU_Q9300_@_2.50GHz-with-glibc2.2.5
Timestamp of tree: Mon, 08 Jun 2009 12:45:02 +0000
app-shells/bash:     3.2_p48-r1
dev-java/java-config: 1.3.7, 2.1.6-r1
dev-lang/python:     2.5.4-r2
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.4.3-r5
sys-apps/sandbox:    1.9
sys-devel/autoconf:  2.63-r1
sys-devel/automake:  1.10.2
sys-devel/binutils:  2.18-r4
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64 ~amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-Os -march=x86-64 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/entropy /usr/kde/3.5/share/config/kdm /usr/kde/4.2/env /usr/kde/4.2/share/config /usr/kde/4.2/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/skel /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-Os -march=x86-64 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="collision-protect distlocks fixpackages parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp:://ftp.uni-erlangen.de/pub/mirrors/gentoo http://mirror.switch.ch/ftp/mirror/gentoo/"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1"
LINGUAS="en"
MAKEOPTS="-s -j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/sunrise /usr/local/portage/layman/sabayon"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="7Zip X a52 aac aalib accessibility acl acpi aiglx aim alsa amd64 artswrappersuid audiofile avahi berkdb bidi bluetooth branding bzip2 cairo cdda cddb cdr chm cjk cli config_wizard cpudetection cracklib crypt css cups dbox2 dbus dga dri dts dv dvb dvd dvdr dvdread dvi dxr3 emboss encode extramodules fam fame fat ffmpeg fftw firefox flac flash foomatic-db fortran freetype gcj gdbm gif gimpprint gnutls gphoto2 gpm gs gsm gstreamer gtk hal hfs iconv icq ieee1394 imap inotify ipod ipv6 irc irda isdnlog jabber jack jfs jingle joystick jpeg kde kdeenablefinal kdehiddenvisibility kdeprefix kerberos kickoff kipi lame lcd ldap libnotify live lj lm_sensors logitech-mouse lzo mad mail midi mikmod mjpeg mmx mng mozdevelop mp3 mp3rtp mpeg msn mudflap multilib musepack musicbrainz ncurses network new-login nls nptl nptlonly nsplugin ntfs ogg openal openexr opengl openmp pam pcmcia pcre pda pdf perl png povray ppds pppd pulseaudio python qt3 qt3support qt4 quicktime quotas rar rdesktop readline reflection reiserfs rss scanner sdl session slp sms speex spell spl sse sse2 ssl startup-notification stream svg sysfs tcpd theora tiff tracker truetype udev unicode usb v4l v4l2 visualization voice vorbis weather wifi wmf x264 xcb xfs xine xinerama xml xorg xpm xprint xulrunner xv xvid xvmc yahoo zeroconf zlib" ALSA_CARDS="emu10k1x darla20 darla24 emu10k1 gina20 gina24 hdsp hdspm ice1712 indigo indigoio layla20 layla24 mia mixart mona pcxhr rme32 rme96 sb16 sbawe sscape usbusx2y vx222 usb-usx2y" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="prefork" CAMERAS="agfa_cl20 casio_qv dimagev dimera3500 kodak_dc120 kodak_dc210 kodak_dc240 kodak_dc3200 kodak_ez200 konica_qm150 panasonic_coolshot panasonic_dc1000 panasonic_dc1580 panasonic_l859 polaroid_pdc320 polaroid_pdc640 polaroid_pdc700 ricoh_g3 sipix_blink sipix_blink2 sipix_web2 sony_dscf1 sony_dscf55 toshiba_pdrm11 adc65 aox barbie canon clicksmart310 digigr8 digita directory enigma13 fuji gsmart300 hp215 iclick jamcam jd11 konica largan lg_gsm mars mustek pccam300 pccam600 ptp2 ricoh samsung sierra smal sonix soundvision spca50x sq905 stv0674 stv0680 sx330z template" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse void" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="fbdev vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 4 Mike Auty (RETIRED) gentoo-dev 2009-06-14 09:56:44 UTC
The best way to figure out what's going on with networking issues is to install Wireshark, and then capture the traffic that's entering and leaving your machine both when the problem does happen, and when it doesn't.  That will help you determine whether it's a dns problem, an ipv6 problem, or some other kind of issue.

Please also check your firewalls (from a root prompt "iptables -L -v" and "ip6tables -L -v") to see if you're blocking something that the ubuntu machines aren't (or vice versa).  If you're unsure of any of the information you get, or you need further help checking these things do please post back here.  Be careful about posting pcap files here though, since they may contain passwords from any services you that automatically try to log in to sites on the internet (such as mail checking programs, etc).
Comment 5 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2009-06-17 17:50:41 UTC
Reopen this bug when you provide the information requested by Mike.
Comment 6 Daniel Fleischman 2009-07-14 16:33:28 UTC
(In reply to comment #5)
> Reopen this bug when you provide the information requested by Mike.
> 

Sorry about the delay.



(In reply to comment #4)
> The best way to figure out what's going on with networking issues is to install
> Wireshark, and then capture the traffic that's entering and leaving your
> machine both when the problem does happen, and when it doesn't.  That will help
> you determine whether it's a dns problem, an ipv6 problem, or some other kind
> of issue.
I've installed Wireshark, but I am not sure what to post here. Sorry.

> 
> Please also check your firewalls (from a root prompt "iptables -L -v" and
> "ip6tables -L -v") to see if you're blocking something that the ubuntu machines
> aren't (or vice versa).  If you're unsure of any of the information you get, or
> you need further help checking these things do please post back here.  Be
> careful about posting pcap files here though, since they may contain passwords
> from any services you that automatically try to log in to sites on the internet
> (such as mail checking programs, etc).
> 

I don't even hava iptables and ip6tables installed :)


(In reply to comment #2)
> and what is your "emerge --info"?
> 
Portage 2.2_rc33 (default/linux/amd64/2008.0, gcc-4.3.3, glibc-2.9_p20081201-r2, 2.6.29-gentoo-r5 x86_64)
=================================================================
System uname: Linux-2.6.29-gentoo-r5-x86_64-Intel-R-_Core-TM-2_Quad_CPU_Q9300_@_2.50GHz-with-glibc2.2.5
Timestamp of tree: Sun, 12 Jul 2009 05:30:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 2.1.8-r1
dev-lang/python:     2.4.6, 2.5.4-r3
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 2.0.0-r2
sys-apps/openrc:     0.4.2-r1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.5, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=core2 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=core2 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks fixpackages parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.c3sl.ufpr.br/ ftp://gentoo.c3sl.ufpr.br/gentoo/ "
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed"
MAKEOPTS="-j10 --load-average"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/sabayon"
SYNC="rsync://rsync.samerica.gentoo.org/gentoo-portage"
USE="X acl alsa amd64 bash-completion berkdb bzip2 cdr cli cracklib crypt cups dbus dri dvd dvdr dvdread encode fortran gdbm gif gmp gnome gpm gstreamer gtk hal iconv ipv6 isdnlog jpeg lm_sensors mad midi mmx mp3 mpeg mudflap multilib ncurses nls nptl nptlonly ogg openmp pam pcre perl png pppd python readline reflection session spl sse sse2 sse3 ssl sysfs tcpd test tiff truetype unicode vim vim-syntax vorbis xml xorg xulrunner zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="prefork" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 7 Mike Auty (RETIRED) gentoo-dev 2009-07-14 16:46:07 UTC
Hiya Daniel,

Please start wireshark.  You should be presented with a list of interfaces (things like eth0, wmaster0, etc), please choose the appropriate ethernet interface for your system (if you're using a wired connection, eth0 is probably the right choice, if it's a wireless connection, try something that looks like wlan0).  If you're running an older version of wireshark, you can click the toolbar button that looks like a computer card with a spanner on it.  Then choose the interface from the dropdown list at the top of the dialog and click ok.

You should start to see some network traffic being produced.  Once you've identified that google isn't responding, start wireshark, go through the above procedure, then go and try to visit google again.  Please be careful to turn off any other programs that might check your mail or similar, in order to ensure you don't include any passwords in the packet capture.  Finally, click the toolbar icon that looks like a computer card with a red circular X, and then select File > Save As from wireshark, and save the packet capture to a file.  It should be at most 1Mb in size.  If it's significantly larger than that, then your computer's been downloading something else in the background and it will take us a long time to pick through what's going on.

Once you have your small packet capture file, please post it as an attachment to this bug.

Please also be aware, that this may be hardware related (either the network card in your machine, or further along the line somewhere), and as such we may not be able to help.  You can test those out by connecting a different machine to the network in the same way you connect your current machine to the network (but with a different operating system) and see if the issue persists.  If it does, then it's definitely not a Gentoo issue, if not then we can help you try and figure out what's going wrong.

I'm remarking as NEEDINFO but, as ever, just reopen it once you get back to us.  Thanks...  5:)
Comment 8 Daniel Fleischman 2009-07-15 04:17:37 UTC
Created attachment 197991 [details]
wireshark file. Tried to access google.com and than gmail.com

Attached the wireshark file.

Thanks a lot for the help.
Daniel.
Comment 9 Daniel Fleischman 2009-07-15 04:18:12 UTC
Reopened the bug, attached the file asked.
Comment 10 Mike Auty (RETIRED) gentoo-dev 2009-07-15 08:31:05 UTC
Ok, thanks very much for that Daniel.  The traditional TCP threeway handshake goes SYN, SYN/ACK, ACK.  What happens on your first connection is SYN, SYN/ACK, RST meaning that your machine resets the connections after the response from google during the TCP handshake.  Interestingly it sent an RST almost immediately.  That's a little bit odd and suggests to me dodgy hardware.  What's really odd is that later on there seems to be an already established connection to gmail, you make an http request, it sends a response, and your machine acts as though it never saw the resposne (it sends an ACK with a sequence number suggesting it never saw the previous packet).  Now that's really odd because firstly, there's no reason to send an ACK if you haven't seen any more data and secondly, wireshark picked up the other data so your machine did see it...

So, I've got some more information for you to post here if you don't mind?  Please include the output of "ifconfig -a", also please attach your kernel config file (/usr/src/linux/.config) and finally let us know what hardware you're using for your network card (or include the output of lspci)...
Comment 11 Daniel Fleischman 2009-07-15 12:58:06 UTC
First of all, thanks a lot for your answer.
(In reply to comment #10)
> Ok, thanks very much for that Daniel.  The traditional TCP threeway handshake
> goes SYN, SYN/ACK, ACK.  What happens on your first connection is SYN, SYN/ACK,
> RST meaning that your machine resets the connections after the response from
> google during the TCP handshake.  Interestingly it sent an RST almost
> immediately.  That's a little bit odd and suggests to me dodgy hardware. 
What's a little strange to me is that it only happens with google's sites, and if I reboot (I've tried to "/etc/init.d/net.eth0 restart", but it didn't work, google was still "TCP-unreachable") it just works normally. Before it stops working, I can ping google, what shows that the problem is with the TCP.

Does it have some kind os cache (that's the only reason I can think of to work when I reboot.
> What's really odd is that later on there seems to be an already established
> connection to gmail, you make an http request, it sends a response, and your
> machine acts as though it never saw the resposne (it sends an ACK with a
> sequence number suggesting it never saw the previous packet).  Now that's
> really odd because firstly, there's no reason to send an ACK if you haven't
> seen any more data and secondly, wireshark picked up the other data so your
> machine did see it...
> 
> So, I've got some more information for you to post here if you don't mind? 
Of course I don't :)
> Please include the output of "ifconfig -a", also please attach your kernel
> config file (/usr/src/linux/.config) and finally let us know what hardware
> you're using for your network card (or include the output of lspci)...

OK, I use the Intel DG35EC motherboard's onboard network controller. From lspci:
00:19.0 Ethernet controller: Intel Corporation 82566DC Gigabit Network Connection (rev 02)

And "ifconfig -a" is just below:
dummy0    Link encap:Ethernet  HWaddr 16:c5:e7:c9:ec:ac  
          BROADCAST NOARP  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0      Link encap:Ethernet  HWaddr 00:1c:c0:6c:7e:d3  
          inet addr:192.168.1.110  Bcast:255.255.255.255  Mask:255.255.255.0
          inet6 addr: fe80::21c:c0ff:fe6c:7ed3/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13772 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14814 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:11155267 (10.6 MiB)  TX bytes:2411836 (2.3 MiB)
          Memory:e3200000-e3220000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:415 errors:0 dropped:0 overruns:0 frame:0
          TX packets:415 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:12035 (11.7 KiB)  TX bytes:12035 (11.7 KiB)

sit0      Link encap:IPv6-in-IPv4  
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


I will attach the .config to this bug.

Thanks a lot for your help.
Comment 12 Daniel Fleischman 2009-07-15 12:59:41 UTC
Created attachment 198035 [details]
Kernel configuration file
Comment 13 Mike Auty (RETIRED) gentoo-dev 2009-07-15 23:07:21 UTC
Hiya Daniel, no problem, but we're not out of the woods yet...  5;)

It looks like you've got a lot of networking options turned on that you don't need and might have an effect.  Particularly I'd turn off the TCP Congestion stuff (TCP_CONG_ADVANCED), TCP MD5 Signatures (TCP_MD5SIG), and if you don't really need/know about it/use it IPv6 (IPV6) as well.  Also, if you have syn cookies (TCP_SYNCOOKIES) enabled (not just in the kernel, but have also set /proc/sys/net/ipv4/tcp_syncookies) then I'd disable that too (from the kernel documentation "Syncookies seriously violate TCP protocol").  You can find any of these by starting "make menuconfig", pressing / and then typing the bit in brackets/capitals to find it.

Basically turn off any of the weird and wonderful IP/TCP type stuff you might have turned on, and then see if it works, and if it does (and you really want all that stuff), then you can start enabling them again one-by-one until you find the culprit.  Really though, you probably don't need any of that stuff unless you're running some massive data-centre based behemoth of a machine that's getting several gigs of traffic an hour...

So, I'm gonna go with TEST-REQUEST again.  5;)  As ever, just reopen it if there's any developments (I'll see any response you post whether it's open or not, so don't worry), and hopefully that'll fix things, but if not then we can take another look...  5:)