This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Weird behavior when connecting to google.com (TCP previous segment not captured)

0

I had Ubuntu 11.10 and in the last few weeks I experienced an obscure problem: after I had the computer running for a few days I could no longer connect to google.com or anything related to google. All sites worked with all browsers (Firefox, chrome, opera) except google. It remained in the connecting phase for a few minutes and either timed out or finally connected with this huge delay.

Even if I entered other sites such as this one, if it had anything to do with google such adsense or gstatic or whatever with g in it, that site took a long time to load waiting in connecting to gstatic.com . Anything google related took minutes to work, but everything else worked instantly!

I tried rebooting or using other machine(with windows on it) and this worked, so it's not network related. But after a few days it started not working again... So I upgraded to the Precise Pangolin hoping this behavior would go away. It didn't! After a few days I get the same behavior as in 11.10.

What am I supposed to do? Reboot every other day?

I didn't have this problem with neither 10.10 or 11.04.

I found the Realtek RTL8168/8111E issue with the r8169 driver but this is not exactly the same card so probably trying r8168 won't help. After trying the new driver I still get the same behavior. I will show you what wireshark says when receiving data from google:

No.     Time           Source                Destination           Protocol Length Info
113 12.354065000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958317 TSecr=42206636 WS=64
130 12.402673000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958366 TSecr=42206636 WS=64
146 12.608145000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958571 TSecr=42206636 WS=64
156 12.656652000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958619 TSecr=42206636 WS=64
157 12.747373000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958711 TSecr=42206636 WS=64
161 12.821862000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421958785 TSecr=42206636 WS=64
163 13.147872000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959111 TSecr=42206636 WS=64
167 13.347348000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959311 TSecr=42206636 WS=64
168 13.351575000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959315 TSecr=42206636 WS=64
170 13.400050000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959363 TSecr=42206636 WS=64
171 13.421910000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959385 TSecr=42206636 WS=64
177 13.604892000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959568 TSecr=42206636 WS=64
179 13.653929000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959617 TSecr=42206636 WS=64
180 13.747964000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959711 TSecr=42206636 WS=64
183 14.021338000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421959985 TSecr=42206636 WS=64
184 14.547381000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421960511 TSecr=42206636 WS=64
185 14.621228000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421960585 TSecr=42206636 WS=64
186 14.621700000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421960585 TSecr=42206636 WS=64
187 14.947683000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421960911 TSecr=42206636 WS=64
191 15.355729000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421961319 TSecr=42206636 WS=64
193 15.404014000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421961367 TSecr=42206636 WS=64
200 15.609680000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421961573 TSecr=42206636 WS=64
203 15.658207000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421961621 TSecr=42206636 WS=64
207 15.822131000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421961786 TSecr=42206636 WS=64
216 16.947171000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421962911 TSecr=42206636 WS=64
218 17.022812000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421962986 TSecr=42206636 WS=64
222 17.347885000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421963311 TSecr=42206636 WS=64
269 18.222432000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421964186 TSecr=42206636 WS=64
287 19.363611000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421965327 TSecr=42206636 WS=64
289 19.412078000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421965375 TSecr=42206636 WS=64
295 19.621025000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421965584 TSecr=42206636 WS=64
297 19.670286000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > 49002 [SYN, ACK] Seq=109588186 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421965633 TSecr=42206636 WS=64
311 21.748560000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421967712 TSecr=42206636 WS=64
312 21.824699000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421967788 TSecr=42206636 WS=64
320 23.025160000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421968989 TSecr=42206636 WS=64
327 27.379578000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421973343 TSecr=42206636 WS=64
330 27.428045000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=0 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421973391 TSecr=42206636 WS=64
336 27.638004000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=15574924 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421973602 TSecr=42206636 WS=64
338 27.686163000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421973649 TSecr=42206636 WS=64
346 28.151691000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421974115 TSecr=42206636 WS=64
348 28.752715000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421974715 TSecr=42206636 WS=64
349 29.951576000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421975915 TSecr=42206636 WS=64
360 32.351634000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421978315 TSecr=42206636 WS=64
364 37.153511000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421983117 TSecr=42206636 WS=64
385 43.427848000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > 48993 [SYN, ACK] Seq=485534174 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989392 TSecr=42206636 WS=64
387 43.460361000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > 48998 [SYN, ACK] Seq=485282700 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989423 TSecr=42206636 WS=64
393 43.685892000   74.125.232.219        192.168.1.100         TCP      74     [TCP Previous segment not captured] http > matahari [SYN, ACK] Seq=485596662 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989650 TSecr=42206636 WS=64
395 43.718463000   74.125.232.219        192.168.1.100         TCP      74     http > 49002 [SYN, ACK] Seq=234839129 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989682 TSecr=42206636 WS=64
396 43.754973000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=485534174 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989719 TSecr=42206636 WS=64
398 43.834404000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=485282700 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989798 TSecr=42206636 WS=64
400 44.033826000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=485596662 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421989998 TSecr=42206636 WS=64
401 44.354947000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=485534174 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421990319 TSecr=42206636 WS=64
402 44.435384000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=485282700 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421990398 TSecr=42206636 WS=64
403 44.633806000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=485596662 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421990598 TSecr=42206636 WS=64
404 45.554892000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=485534174 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421991519 TSecr=42206636 WS=64
405 45.634302000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=485282700 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421991598 TSecr=42206636 WS=64
406 45.833829000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=485596662 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421991798 TSecr=42206636 WS=64
411 47.956110000   74.125.232.219        192.168.1.100         TCP      74     http > 48993 [SYN, ACK] Seq=485534174 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421993920 TSecr=42206636 WS=64
412 48.034301000   74.125.232.219        192.168.1.100         TCP      74     http > 48998 [SYN, ACK] Seq=485282700 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421993998 TSecr=42206636 WS=64
414 48.234786000   74.125.232.219        192.168.1.100         TCP      74     http > matahari [SYN, ACK] Seq=485596662 Ack=1 Win=14180 Len=0 MSS=1430 SACK_PERM=1 TSval=1421994198 TSecr=42206636 WS=64

asked 06 Sep '12, 04:24

Sebastian's gravatar image

Sebastian
1●1●1●1
accept rate: 0%

can you please post the whole conversation at cloudshark.org? With only the SYN,ACK from google, it's hard to do any troubleshooting ;-)

(07 Sep '12, 05:22) Kurt Knochner ♦

2 Answers:

0

First get a baseline of communications that work (like after a reboot). Then compare that to communications with other hosts, what is the difference? What TCP congestion avoidance algorithm or other extension can you find in that traffic? What networking equipment do you have between your computer and the internet? Can it handle these TCP connections properly?

answered 06 Sep '12, 14:35

Jaap's gravatar image

Jaap ♦
11.7k●16●101
accept rate: 14%

I have tested 2 routers with the same behaviour (now I am on a TP_LINK Model No. TL-R402M). How do I find what congestion avoidance algorithm the network is using? I have two theories: since I tried kernel versions from the time this problem wasn't manifesting and I still get the behaviour I'm thinking it's either something newer in Ubuntu that doesn't have anything to do with the kernel that is causing the behaviour or something at my ISP changed. But if something at my ISP changed shouldn't I get the same behaviour on Windows machines? Is the tcp stack really that different?

(08 Sep '12, 06:45) Sebastian

0

I have noticed that with Google mail at least it likes the time and date reasonably close to reality. No idea how it checks or whether you reached the point at which it checks though. The error when I was way off was Too Many Redirects which at least is consistent with things slowing down. Just a thought.

answered 07 Sep '12, 04:34

MartinM's gravatar image

MartinM
167●1●7
accept rate: 33%