On Thu, Jul 24, 2008 at 11:25:18AM +0200, Ingo Molnar wrote:

without rebooting the kernel, right? And then if the bug comes back 
again we've nailed it down to the area you suspect, correct?

Yes, except that you'll have to reestablish those connections
to make the new setting take effect.  In either case please
verify with tcpdump to make sure that both sides are proposing
sack at the start of the connection.  Alternatively see whether
sacks are generated in case of packet loss.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt