OK, something's seriously screwed up on dione's kernel. Could
you please disable syncookies (which should enable SACK for you)
and see if the problem goes away?
I think our Reno code may have been broken.
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--