Error map

Connections hang on large transfers (PMTU black hole) Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole

Networking · layer 2, Network

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Connections hang on large transfers (PMTU black hole) — Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole (Networking)Connections…VPN connected but internal subnets unreachable — Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets (Networking)VPN connected but i…High TCP retransmissions / packet loss — Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path (Networking)High TCP retransmis…Possible SYN flooding on port 80. Sending cookies. — Networking: TCP: request_sock_TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters. (Networking)Possible SYN floodi…The specified network name is no longer available (64) — Networking: Windows error 64: The specified network name is no longer available — SMB session dropped (Networking)The specified netwo…WireGuard: Handshake did not complete after 5 seconds — Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes (Networking)WireGuard: Handshak…Frag needed and DF set (ICMP type 3 code 4) — Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set (Networking)Frag needed and DF …OSPF neighbor stuck in EXSTART/EXCHANGE — Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch) (Networking)OSPF neighbor stuck…TCP ZeroWindow / TCP Window Full — Networking: Wireshark: TCP ZeroWindow, TCP Window Full — the receiver can't keep up and tells the sender to stop (Networking)TCP ZeroWindow / TC…Many sockets in CLOSE_WAIT — Networking: Thousands of sockets in CLOSE_WAIT — the application is not closing its side of the connection (Networking)Many sockets in CLO…NO_PROPOSAL_CHOSEN (IPsec/IKE) — Networking: IKE: received NO_PROPOSAL_CHOSEN — IPsec peers can't agree on encryption, hash or DH group (Networking)NO_PROPOSAL_CHOSEN …Cannot assign requested address (EADDRNOTAVAIL) — Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections (Networking)Cannot assign reque…times the listen queue of a socket overflowed — Networking: netstat -s: 1523 times the listen queue of a socket overflowed — accept queue full, connections dropped (Networking)times the listen qu…Reply from 192.168.1.1: Destination host unreachable — Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3) (Networking)Reply from 192.168.…Wrong subnet mask: hosts can't reach each other — Networking: Two hosts on one LAN can't talk — subnet mask or network address mismatch (Networking)Wrong subnet mask: …Internal hostnames fail on VPN (split DNS / systemd-resolved) — Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS (Networking)Internal hostnames …Wi-Fi keeps disconnecting (weak signal, -80 dBm) — Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3) (Networking)Wi-Fi keeps disconn…Duplex mismatch: late collisions / CRC errors — Networking: Duplex mismatch — late collisions, runts and CRC errors on the switch port (Networking)Duplex mismatch: la…UDP RcvbufErrors / packet receive errors — Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer (Networking)UDP RcvbufErrors / …Cloudflare 502 — Cloudflare-branded 502 Bad Gateway / 504 Gateway Timeout ("cloudflare" footer) (Cloudflare)Cloudflare 502nc/telnet hangs: firewall DROP vs REJECT — Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused") (Networking)nc/telnet hangs: fi…nf_conntrack: table full, dropping packet — Networking: kernel: nf_conntrack: table full, dropping packet — new connections fail on a Linux firewall/NAT host (Networking)nf_conntrack: table…0x80070035 — 0x80070035: The network path was not found (System error 53) (Windows)0x80070035PING: transmit failed. General failure. — Networking: PING: transmit failed. General failure. / ping: sendmsg: Operation not permitted (Networking)PING: transmit fail…Windows: Default gateway is not available — Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled (Networking)Windows: Default ga…4-way handshake timeout / Incorrect password — Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY (Networking)4-way handshake tim…ICMP Destination unreachable (Port unreachable) — Networking: ICMP Destination unreachable (Port unreachable) — UDP packet sent to a port where nothing is listening (Networking)ICMP Destination un…Your Remote Desktop Services session has ended (network problem) — Networking: Your Remote Desktop Services session has ended. Possibly the network connection was lost / Remote Desktop disconnected, error code 0x904 (Networking)Your Remote Desktop…1033 — Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected) (Cloudflare)1033cloudflared Unable to reach the origin service — cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502) (Cloudflare)cloudflared Unable …Ping: Request timed out — Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP) (Networking)Ping: Request timed…404 — HTTP 404 Not Found (HTTP)404405 — HTTP 405 Method Not Allowed (HTTP)405Network is unreachable — connect: Network is unreachable (ENETUNREACH) (Linux)Network is unreacha…too many open files — Go: accept tcp [::]:8080: accept4: too many open files / open x: too many open files (Go)too many open filesSFP link down / Loss of Signal (LOS) — Networking: Interface down — SFP transceiver Loss of Signal / no receive light (Networking)SFP link down / Los…arp -a shows (incomplete) — Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop (Networking)arp -a shows (incom…sslv3 alert handshake failure — OpenSSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure (SSL alert number 40) (SSL / TLS)sslv3 alert handsha…Network cable unplugged / NO-CARRIER — Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged (Networking)Network cable unplu…Native VLAN mismatch / wrong VLAN, no connectivity — Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway (Networking)Native VLAN mismatc…MAC flapping / broadcast storm (spanning tree loop) — Networking: %SW_MATM-4-MACFLAP_NOTIF: Host is flapping between ports / broadcast storm (Networking)MAC flapping / broa…upstream timed out — Nginx: upstream timed out (110: Connection timed out) while reading response header from upstream (Nginx / Apache)upstream timed outWARNING: The TCP backlog setting of 511 cannot be enforced — Redis: # WARNING: The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128 (Redis)WARNING: The TCP ba…

Directly related (12)

VPN connected but internal subnets unreachableNetworking

Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets

The tunnel is up, but traffic for the office/VPC subnets isn't sent through it or comes back the wrong way.

High TCP retransmissions / packet lossNetworking

Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path

Packets are being lost, so TCP resends them and throughput collapses.

Possible SYN flooding on port 80. Sending cookies.Networking

Networking: TCP: request_sock_TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters.

The server's pending-connection queue filled, so the kernel switched to SYN cookies to survive.

The specified network name is no longer available (64)Networking

Networking: Windows error 64: The specified network name is no longer available — SMB session dropped

A connection to a Windows file share was cut while in use.

WireGuard: Handshake did not complete after 5 secondsNetworking

Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes

The WireGuard peers can't complete the cryptographic handshake, so no traffic flows.

Frag needed and DF set (ICMP type 3 code 4)Networking

Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set

A packet is larger than the path MTU and is marked "don't fragment", so a router discards it.

OSPF neighbor stuck in EXSTART/EXCHANGENetworking

Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch)

Two OSPF routers see each other but never finish exchanging databases, cycling between EXSTART and DOWN.

TCP ZeroWindow / TCP Window FullNetworking

Networking: Wireshark: TCP ZeroWindow, TCP Window Full — the receiver can't keep up and tells the sender to stop

The receiving application isn't reading data fast enough, so its TCP buffer filled and the sender must pause.

Many sockets in CLOSE_WAITNetworking

Networking: Thousands of sockets in CLOSE_WAIT — the application is not closing its side of the connection

The other end closed the connection, but your program never called close(), so the socket stays open.

NO_PROPOSAL_CHOSEN (IPsec/IKE)Networking

Networking: IKE: received NO_PROPOSAL_CHOSEN — IPsec peers can't agree on encryption, hash or DH group

The two VPN gateways offered encryption settings that have nothing in common, so the tunnel never comes up.

Cannot assign requested address (EADDRNOTAVAIL)Networking

Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections

The machine ran out of local ports for new outgoing connections to the same destination.

times the listen queue of a socket overflowedNetworking

Networking: netstat -s: 1523 times the listen queue of a socket overflowed — accept queue full, connections dropped

The application accepts connections slower than they arrive, so the kernel's accept queue overflows.

Two steps away (30)

Reply from 192.168.1.1: Destination host unreachableNetworking

Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3)

A router (or your own PC) tells you it has no way to deliver the packet to that address.

Wrong subnet mask: hosts can't reach each otherNetworking

Networking: Two hosts on one LAN can't talk — subnet mask or network address mismatch

The hosts disagree about which addresses are local, so one tries to route traffic that should go straight across the LAN.

Internal hostnames fail on VPN (split DNS / systemd-resolved)Networking

Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS

The VPN works by IP, but internal hostnames fail because queries still go to your normal DNS server.

Wi-Fi keeps disconnecting (weak signal, -80 dBm)Networking

Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3)

The wireless link is too weak or too noisy to hold, so the client drops and rejoins repeatedly.

Duplex mismatch: late collisions / CRC errorsNetworking

Networking: Duplex mismatch — late collisions, runts and CRC errors on the switch port

One side runs full duplex and the other half duplex, so the link works but is slow and drops packets.

UDP RcvbufErrors / packet receive errorsNetworking

Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer

UDP packets arrive faster than the application reads them, so the kernel throws the extras away.

Cloudflare 502Cloudflare

Cloudflare-branded 502 Bad Gateway / 504 Gateway Timeout ("cloudflare" footer)

A plain-looking 502/504 page with “cloudflare” at the bottom comes from Cloudflare’s network itself (or an origin response it cou…

nc/telnet hangs: firewall DROP vs REJECTNetworking

Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused")

A connection attempt gets no answer at all, which points to a firewall dropping the packets rather than a closed port.

nf_conntrack: table full, dropping packetNetworking

Networking: kernel: nf_conntrack: table full, dropping packet — new connections fail on a Linux firewall/NAT host

The connection-tracking table is full, so the kernel drops packets for any new connection.

0x80070035Windows

0x80070035: The network path was not found (System error 53)

Windows can’t reach the shared folder — name resolution, SMB settings, firewall or network discovery is preventing it.

PING: transmit failed. General failure.Networking

Networking: PING: transmit failed. General failure. / ping: sendmsg: Operation not permitted

The operating system could not even send the packet, so the problem is local (adapter, route or firewall), not the remote host.

Windows: Default gateway is not availableNetworking

Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled

The PC can't reach its router, so it has no path out of the local network.

4-way handshake timeout / Incorrect passwordNetworking

Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY

The Wi-Fi association started but key negotiation failed, almost always a wrong password.

ICMP Destination unreachable (Port unreachable)Networking

Networking: ICMP Destination unreachable (Port unreachable) — UDP packet sent to a port where nothing is listening

A host answered a UDP packet with an ICMP message saying no program is listening on that port.

Your Remote Desktop Services session has ended (network problem)Networking

Networking: Your Remote Desktop Services session has ended. Possibly the network connection was lost / Remote Desktop disconnected, error code 0x904

An established Remote Desktop session dropped because the network under it stalled or the session was reset.

1033Cloudflare

Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected)

The hostname routes to a Cloudflare Tunnel, but no healthy cloudflared connector is running for it.

cloudflared Unable to reach the origin serviceCloudflare

cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502)

The tunnel is connected, but cloudflared can’t reach your local service at the address in the ingress rule.

Ping: Request timed outNetworking

Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP)

No echo reply arrived in time: the host is down, unreachable, or simply ignores ping.

404HTTP

HTTP 404 Not Found

The server can’t find anything at the requested URL.

405HTTP

HTTP 405 Method Not Allowed

The URL exists, but it doesn’t accept the HTTP method you used (e.g. POST to a GET-only route).

Network is unreachableLinux

connect: Network is unreachable (ENETUNREACH)

The host has no route to the destination network — no default gateway, interface down, or trying IPv6 without IPv6 connectivity.

too many open filesGo

Go: accept tcp [::]:8080: accept4: too many open files / open x: too many open files

The process reached its file-descriptor limit — usually leaked connections, files or response bodies.

SFP link down / Loss of Signal (LOS)Networking

Networking: Interface down — SFP transceiver Loss of Signal / no receive light

A fibre or SFP link is down because the transceiver receives no light.

arp -a shows (incomplete)Networking

Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop

The machine asked "who has this IP?" and nobody on the local network answered.

sslv3 alert handshake failureSSL / TLS

OpenSSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure (SSL alert number 40)

The server aborted the handshake with alert 40 — no acceptable parameters (cipher, signature algorithm, client certificate or SNI…

Network cable unplugged / NO-CARRIERNetworking

Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged

The network card sees no electrical link, so nothing above it (IP, DNS, browser) can work.

Native VLAN mismatch / wrong VLAN, no connectivityNetworking

Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway

A port or trunk carries a different VLAN than expected, so hosts silently land on the wrong network.

MAC flapping / broadcast storm (spanning tree loop)Networking

Networking: %SW_MATM-4-MACFLAP_NOTIF: Host is flapping between ports / broadcast storm

A layer-2 loop is making frames circle the network, saturating links and making the whole VLAN crawl.

upstream timed outNginx / Apache

Nginx: upstream timed out (110: Connection timed out) while reading response header from upstream

Nginx waited longer than proxy_read_timeout (60 s default) for the backend (app server, PHP-FPM) to respond, then returned 504.

WARNING: The TCP backlog setting of 511 cannot be enforcedRedis

Redis: # WARNING: The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128

The kernel limits the listen queue below Redis' `tcp-backlog`, so bursts of new connections may be dropped.