• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 239
  • Last Modified:

Packet Decoding

After users complaining of network slowness I ran a tcp dump on a server and noticed many

TCP      [TCP Out-Of-Order] 9042 > 52734 [PSH, ACK] Seq=352279 Ack=334509 Win=64076 Len=1460

TCP      [TCP Dup ACK 17864#2] 52734 > 9042 [ACK] Seq=334509 Ack=340599 Win=32768 Len=0

Any tips? Advice

Thanks
0
willbaclimon
Asked:
willbaclimon
  • 2
  • 2
2 Solutions
 
giltjrCommented:
The out of order packet indicates that someplace you have two paths between the hosts and that packets are being received out of order.

The duplicate ACK means that somewhere a packet was dropped and the remote side did not see what it expects so it resent the ACK.

Both of these error are normally an indication that there is something in the network path that is saturated, that is running above and beyond it capacity.

I would start looking at link utilization on any WAN links that this traffic may go over.  I would also check to see if you have any old routers that may be being pushed beyond their design capacity.
0
 
harbor235Commented:


I agree with gilltjr, Out of order segements and duplicate acks are a sign of congestion, either on the network or on the end systems.

harbor235 ;}
0
 
willbaclimonAuthor Commented:
Thank you  both....This is a lan based server application with gig connectivity. I have checked network utilization, switch ports errors, crc's etc.. No luck so far. Although this is a sign of network congestion or issue, I believe it might be application due to this app being in development...Is there any way to prove that?


0
 
giltjrCommented:
Where did you run the packet capture from?  The server, a mirrored port of something, your desktop?

There is absolutely no way that somebody could connect to this box over a WAN, like say the Internet?

In the dump you should have the 2 IP addresses that this connection deals with and you need to look at the full network path between those two devices.
0
 
willbaclimonAuthor Commented:
The issue winded up being the linux server nic drivers.

0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now