• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 604
  • Last Modified:

Super slow downloads when using SSL through a firewall from Exchange 2007 OWS

Hello,
when using OWA (Exchange 2007) outside of our firewall (PFSense 1.2.2) downloading attachments are horribly slow. Internally and through a VPN (PFSense 1.2.2) externally everything is quick.

I have isolated this issue to be IIS 7/Firewall related

Downloading the same file from the IIS server with SSL averages 5 KB/s while without SSL is about 800 KB/s

I have tested my WAN providers (Rogers) MTU settings and 1500 is fine.

C:\Documents and Settings\paulf>ping -f -l 1472 4.2.2.1

Pinging 4.2.2.1 with 1472 bytes of data:

Reply from 4.2.2.1: bytes=1472 time=43ms TTL=53

Pulling packet dumps from the firewall shows that the packets MTU are 1300 (hard set it on W2K Server 64 bit) pasted in the code window.

Now let me explain the cases where it does work as a contrast to when it doesn't.

1. Internally, files download at blazing speeds.
2. Through a VPN tunnel between this office and another, the downloads max out the WAN speed.

Does anyone have any experience with this?


19:29:51.918344 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3651, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x322e (correct), 2246749920:2246749920(0) ack 3927998498 win 64512
19:29:51.918689 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 64, id 21265, offset 0, flags [DF], proto TCP (6), length 1300) cmr-208-124-191-222.cr.net.cable.rogers.com.https > 141.117.184.32.2795: ., cksum 0x9284 (correct), 12601:13861(1260) ack 0 win 65520
19:29:51.918753 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 64, id 56596, offset 0, flags [DF], proto TCP (6), length 1300) cmr-208-124-191-222.cr.net.cable.rogers.com.https > 141.117.184.32.2795: ., cksum 0x7d14 (correct), 13861:15121(1260) ack 0 win 65520
19:29:51.918800 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 64, id 36457, offset 0, flags [DF], proto TCP (6), length 1300) cmr-208-124-191-222.cr.net.cable.rogers.com.https > 141.117.184.32.2795: ., cksum 0x9dfd (correct), 15121:16381(1260) ack 0 win 65520
19:29:51.938671 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3711, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x2856 (correct), 0:0(0) ack 2521 win 64512
19:29:51.959651 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3780, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x1e7e (correct), 0:0(0) ack 5041 win 64512
19:29:51.979704 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3849, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x14a6 (correct), 0:0(0) ack 7561 win 64512
19:29:52.000707 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3888, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x0ace (correct), 0:0(0) ack 10081 win 64512
19:29:52.021386 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3921, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0x00f6 (correct), 0:0(0) ack 12601 win 64512
19:29:52.042768 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 3992, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0xf71d (correct), 0:0(0) ack 15121 win 64512
19:29:52.133951 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 14676, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: P, cksum 0xe338 (correct), 1445883968:1445885228(1260) ack 3340641421 win 64584
19:29:52.247066 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4042, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0xf231 (correct), 0:0(0) ack 16381 win 64512
19:29:52.247159 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1246: (tos 0x0, ttl 64, id 58158, offset 0, flags [DF], proto TCP (6), length 1232) cmr-208-124-191-222.cr.net.cable.rogers.com.https > 141.117.184.32.2795: P, cksum 0x8b3e (correct), 16381:17573(1192) ack 0 win 65520
19:29:52.347796 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 117, id 4076, offset 0, flags [DF], proto TCP (6), length 52) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x41e2 (correct), 1:1(0) ack 1260 win 64512 <nop,nop,sack 1 {2520:3780}>
19:29:52.348245 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 29797, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x0204 (correct), 1260:2520(1260) ack 1 win 64584
19:29:52.348339 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 41510, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x0a82 (correct), 2520:3780(1260) ack 1 win 64584
19:29:52.360773 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4077, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x139b (correct), 1:1(0) ack 3780 win 64512
19:29:52.361136 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 16182, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x2ae3 (correct), 3780:5040(1260) ack 1 win 64584
19:29:52.361241 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 47388, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x4a59 (correct), 5040:6300(1260) ack 1 win 64584
19:29:52.364292 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4078, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x139b (correct), 1:1(0) ack 3780 win 64512
19:29:52.364641 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 33149, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x7ff8 (correct), 6300:7560(1260) ack 1 win 64584
19:29:52.375302 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4079, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x0eaf (correct), 1:1(0) ack 5040 win 64512
19:29:52.386352 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4082, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x04d7 (correct), 1:1(0) ack 7560 win 64512
19:29:52.386713 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 51768, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xeada (correct), 7560:8820(1260) ack 1 win 64584
19:29:52.386814 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 26188, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x24a5 (correct), 8820:10080(1260) ack 1 win 64584
19:29:52.386924 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 48731, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xaa55 (correct), 10080:11340(1260) ack 1 win 64584
19:29:52.553043 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4086, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xffea (correct), 1:1(0) ack 8820 win 64512
19:29:52.553455 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 54079, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x972a (correct), 11340:12600(1260) ack 1 win 64584
19:29:52.553483 00:04:e2:e3:88:9a (oui Unknown) > 00:50:04:3a:52:30 (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4085, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.2795 > cmr-208-124-191-222.cr.net.cable.rogers.com.https: ., cksum 0xf231 (correct), 0:0(0) ack 17573 win 63320
19:29:52.569553 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 117, id 4087, offset 0, flags [DF], proto TCP (6), length 52) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xdf71 (correct), 1:1(0) ack 8820 win 64512 <nop,nop,sack 1 {11340:12600}>
19:29:52.569926 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 55057, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x25d3 (correct), 12600:13860(1260) ack 1 win 64584
19:29:53.227994 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 60271, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x24a5 (correct), 8820:10080(1260) ack 1 win 64584
19:29:53.354654 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 117, id 4097, offset 0, flags [DF], proto TCP (6), length 52) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xda85 (correct), 1:1(0) ack 10080 win 64512 <nop,nop,sack 1 {11340:12600}>
19:29:53.355090 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 62585, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xaa55 (correct), 10080:11340(1260) ack 1 win 64584
19:29:53.355181 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 22038, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x972a (correct), 11340:12600(1260) ack 1 win 64584
19:29:53.369157 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4098, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xf126 (correct), 1:1(0) ack 12600 win 64512
19:29:53.369535 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 43349, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x25d3 (correct), 12600:13860(1260) ack 1 win 64584
19:29:53.369638 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 42532, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xb9e1 (correct), 13860:15120(1260) ack 1 win 64584
19:29:53.373179 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4100, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xf126 (correct), 1:1(0) ack 12600 win 64512
19:29:53.373540 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 30722, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x5f09 (correct), 15120:16380(1260) ack 1 win 64584
19:29:53.386201 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4102, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xe74e (correct), 1:1(0) ack 15120 win 64512
19:29:53.386550 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 52522, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x9eb9 (correct), 16380:17640(1260) ack 1 win 64584
19:29:53.404216 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4105, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xdd76 (correct), 1:1(0) ack 17640 win 64512
19:29:53.404599 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 36664, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x621a (correct), 17640:18900(1260) ack 1 win 64584
19:29:53.404701 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 4971, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x19d3 (correct), 18900:20160(1260) ack 1 win 64584
19:29:53.404809 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 21264, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x100b (correct), 20160:21420(1260) ack 1 win 64584
19:29:53.884021 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 30508, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x621a (correct), 17640:18900(1260) ack 1 win 64584
19:29:54.059688 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4111, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xd88a (correct), 1:1(0) ack 18900 win 64512
19:29:54.060161 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 57979, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x19d3 (correct), 18900:20160(1260) ack 1 win 64584
19:29:54.060239 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 43599, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x100b (correct), 20160:21420(1260) ack 1 win 64584
19:29:54.088148 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4113, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xceb2 (correct), 1:1(0) ack 21420 win 64512
19:29:54.088548 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 42845, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x3f67 (correct), 21420:22680(1260) ack 1 win 64584
19:29:54.088645 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 32887, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xd71f (correct), 22680:23940(1260) ack 1 win 64584
19:29:54.108183 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4116, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xc4da (correct), 1:1(0) ack 23940 win 64512
19:29:54.108554 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 50543, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xf9c9 (correct), 23940:25200(1260) ack 1 win 64584
19:29:54.108648 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 32812, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x4e0c (correct), 25200:26460(1260) ack 1 win 64584
19:29:54.759868 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 24432, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xf9c9 (correct), 23940:25200(1260) ack 1 win 64584
19:29:54.964862 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4121, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xbfee (correct), 1:1(0) ack 25200 win 64512
19:29:54.965376 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 34579, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x4e0c (correct), 25200:26460(1260) ack 1 win 64584
19:29:54.965442 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 35863, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xbf84 (correct), 26460:27720(1260) ack 1 win 64584
19:29:54.983387 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4123, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xb616 (correct), 1:1(0) ack 27720 win 64512
19:29:54.983791 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 55371, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xc61e (correct), 27720:28980(1260) ack 1 win 64584
19:29:54.983886 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 13376, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xf09a (correct), 28980:30240(1260) ack 1 win 64584
19:29:55.001990 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4128, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xac3e (correct), 1:1(0) ack 30240 win 64512
19:29:55.002351 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 31520, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x3d28 (correct), 30240:31500(1260) ack 1 win 64584
19:29:55.002452 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 538, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x31b3 (correct), 31500:32760(1260) ack 1 win 64584
19:29:55.026456 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4131, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0xa266 (correct), 1:1(0) ack 32760 win 64512
19:29:55.026820 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 44544, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xd7e8 (correct), 32760:34020(1260) ack 1 win 64584
19:29:55.026924 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 18248, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x3262 (correct), 34020:35280(1260) ack 1 win 64584
19:29:55.027029 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 6189, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: P, cksum 0x0a02 (correct), 35280:36540(1260) ack 1 win 64584
19:29:55.305805 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 7530, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: P, cksum 0xd7e0 (correct), 32760:34020(1260) ack 1 win 64584
19:29:55.568185 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4135, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x9d7a (correct), 1:1(0) ack 34020 win 64512
19:29:55.568605 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 8449, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x3262 (correct), 34020:35280(1260) ack 1 win 64584
19:29:55.568703 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 44598, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x0a0a (correct), 35280:36540(1260) ack 1 win 64584
19:29:55.587214 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4138, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x93a2 (correct), 1:1(0) ack 36540 win 64512
19:29:55.587623 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 28422, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xdad1 (correct), 36540:37800(1260) ack 1 win 64584
19:29:55.587728 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 14630, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xfd33 (correct), 37800:39060(1260) ack 1 win 64584
19:29:55.607247 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4141, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x89ca (correct), 1:1(0) ack 39060 win 64512
19:29:55.607632 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 53865, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xcc7c (correct), 39060:40320(1260) ack 1 win 64584
19:29:55.607702 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 22046, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x8442 (correct), 40320:41580(1260) ack 1 win 64584
19:29:55.853781 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 41844, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xcc7c (correct), 39060:40320(1260) ack 1 win 64584
19:29:56.071016 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4146, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x84de (correct), 1:1(0) ack 40320 win 64512
19:29:56.071637 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 57632, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x8442 (correct), 40320:41580(1260) ack 1 win 64584
19:29:56.071728 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 24892, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x1ffd (correct), 41580:42840(1260) ack 1 win 64584
19:29:56.091111 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4148, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x7b06 (correct), 1:1(0) ack 42840 win 64512
19:29:56.091487 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 1585, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x8993 (correct), 42840:44100(1260) ack 1 win 64584
19:29:56.091594 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 56440, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x8291 (correct), 44100:45360(1260) ack 1 win 64584
19:29:56.271850 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4152, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x761a (correct), 1:1(0) ack 44100 win 64512
19:29:56.272258 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 3862, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x71a0 (correct), 45360:46620(1260) ack 1 win 64584
19:29:56.294200 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 117, id 4153, offset 0, flags [DF], proto TCP (6), length 52) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x4bd8 (correct), 1:1(0) ack 44100 win 64512 <nop,nop,sack 1 {45360:46620}>
19:29:56.294567 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 27439, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xa472 (correct), 46620:47880(1260) ack 1 win 64584
19:29:56.838040 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 64364, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x8291 (correct), 44100:45360(1260) ack 1 win 64584
19:29:56.909604 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4154, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x6c42 (correct), 1:1(0) ack 46620 win 64512
19:29:56.910129 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 2415, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xa472 (correct), 46620:47880(1260) ack 1 win 64584
19:29:56.910203 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 50744, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0xae96 (correct), 47880:49140(1260) ack 1 win 64584
19:29:56.923625 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4155, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x6756 (correct), 1:1(0) ack 47880 win 64512
19:29:56.924126 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 12039, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x5c57 (correct), 49140:50400(1260) ack 1 win 64584
19:29:56.937580 00:04:e2:e3:88:9a (oui Unknown) > 00:00:5e:00:01:0e (oui Unknown), ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 117, id 4158, offset 0, flags [DF], proto TCP (6), length 40) 141.117.184.32.1969 > my.server.ca.https: ., cksum 0x5d7e (correct), 1:1(0) ack 50400 win 64512
19:29:56.937980 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 13928, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x7db1 (correct), 50400:51660(1260) ack 1 win 64584
19:29:56.938079 00:50:04:3a:52:30 (oui Unknown) > 00:04:e2:e3:88:9a (oui Unknown), ethertype IPv4 (0x0800), length 1314: (tos 0x0, ttl 127, id 20825, offset 0, flags [DF], proto TCP (6), length 1300) my.server.ca.https > 141.117.184.32.1969: ., cksum 0x1d7d (correct), 51660:52920(1260) ack 1 win 64584

Open in new window

0
zerfuka
Asked:
zerfuka
  • 2
  • 2
1 Solution
 
gheistCommented:
Can you get traffic dump from problem connection using tcpdump and wireshark?
It seems like "advanced window scaling" problem with your or customers firewall.
Or could be duplex mismatch on path to internet.
0
 
zerfukaAuthor Commented:
Interesting though gheist.

Our internet is provided by rogers through a SMC broadband cable router/modem.

Port 1 of that is connected directly to a physical nic on the firewall.

Would this scaling issue explain why only SSL traffic is effected? Honestly I have yet to try downloading a file from another server via SSL.

I will and report back and see if I can fire up wireshark.
0
 
zerfukaAuthor Commented:
Thank Gheist,
things have been super busy at my real 9-5 that I haven't had a time to look into this issue.

I will keep you posted
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now