Ack/Fin packets dropped.

[Patrick Schaaf]

> > The explanation is simple : TCP timeout at the end of a connexion, ie after
> > the 1st FIN/ACK paquet, are very short comparatively to the 5 days timeout
> > during the connexion (30 seconds iirc), ie after the 3 way hand shake.
> 
> It's 10 seconds, but anyway - 10 seconds are a _long_ time for short-lived
> http conncetions.

BTW, 10 seconds is the default also on Cisco router/switches doing
server load balancing (the equivalent to Linux Virtual Server).
So you are in good company, here.

regards
  Patrick