---

n.razhev@n-razhev ~ % >....                                                                                                                                                                                       

tb_old=$(/usr/sbin/sysctl -n net.inet.tcp.tso) || exit 1
[ "$tb_old" = 1 ] || { echo "Stop: TCP TSO is already $tb_old; no change made."; exit 1; }

for tb_target in 10.12.165.142 172.21.0.1; do
  tb_if=$(/sbin/route -n get "$tb_target" | awk '/interface:/{print $2}')
  [ "$tb_if" = utun10 ] || { echo "Stop: $tb_target uses $tb_if."; exit 1; }
done

tb_connection() {
  netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print $4, $5}'
}
tb_peer=$(tb_connection)
[ -n "$tb_peer" ] || { echo 'Stop: no corporate TCP connection.'; exit 1; }
sudo -v || exit 1

tb_restore() {
  trap - EXIT
  if [ "$(/usr/sbin/sysctl -n net.inet.tcp.tso)" = "$tb_old" ]; then
    echo 'TCP TSO remains at its original value.'
  elif sudo -n /usr/sbin/sysctl -w "net.inet.tcp.tso=$tb_old" &&
       [ "$(/usr/sbin/sysctl -n net.inet.tcp.tso)" = "$tb_old" ]; then
    echo "Verified: TCP TSO restored to $tb_old."
  else
    echo "Restore failed. Run: sudo /usr/sbin/sysctl -w net.inet.tcp.tso=$tb_old"
  fi
}
trap tb_restore EXIT
trap 'exit 130' HUP INT TERM

echo 'BEFORE:'
date -u
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'

sudo -n /usr/sbin/sysctl -w net.inet.tcp.tso=0 || exit 1
[ "$(/usr/sbin/sysctl -n net.inet.tcp.tso)" = 0 ] || exit 1
sleep 10

echo 'TEST WITH TCP TSO DISABLED:'
date -u
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
/usr/bin/nc -4 -n -z -v -G 6 -w 6 10.12.165.142 8443
/usr/bin/dig @172.21.0.1 jss.corp.mail.ru A +time=4 +tries=1 +notcp +ignore +noall +comments +answer
netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'

if [ "$(tb_connection)" = "$tb_peer" ]; then
  echo 'Corporate TCP connection unchanged.'
else
  echo 'Corporate connection changed; comparison is inconclusive.'
fi
echo 'Restoring original TCP TSO value now.'
TB_TSO_TEST
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1280
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether 36:47:48:bb:f7:80
Password:
BEFORE:
Tue Oct  6 12:58:29 UTC 2026
tcp4       0  46289  192.168.77.2.58606     194.186.63.27.443      ESTABLISHED
net.inet.tcp.tso: 1 -> 0
TEST WITH TCP TSO DISABLED:
Tue Oct  6 12:58:39 UTC 2026
tcp4       0   1688  192.168.77.2.58606     194.186.63.27.443      ESTABLISHED
Connection to 10.12.165.142 port 8443 [tcp/*] succeeded!

; <<>> DiG 9.10.6 <<>> @172.21.0.1 jss.corp.mail.ru A +time=4 +tries=1 +notcp +ignore +noall +comments +answer
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
tcp4       0  27407  192.168.77.2.58606     194.186.63.27.443      ESTABLISHED
Corporate TCP connection unchanged.
Restoring original TCP TSO value now.
net.inet.tcp.tso: 0 -> 1
Verified: TCP TSO restored to 1.
n.razhev@n-razhev ~ %