This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Retransmit issue

0

alt text HI,

My server send packet to 202.162 but the packet retransmit again..Kindly advice... Is my server fault ? Thanks in advance..

asked 26 Oct '12, 23:05

suarez123's gravatar image

suarez123
19911
accept rate: 0%

edited 27 Oct '12, 05:30

grahamb's gravatar image

grahamb ♦
19.8k330206


One Answer:

4

Looks like the server is unwilling to respond after the initial three way handshake, or the packets do not make it through at all. If I am not mistaken you have a RTT of about 5ms, and the retransmissions come after a couple of hundred ms, so they're not just out of orders etc. From the timing I guess you're capturing on (or very close to) the client, so what you might do to solve this issue would be to capture close at the server instead. If you test again you can tell if the packets all make it through to the server.

My bet is that you have some kind of MTU problem, because the small SYN-SYN/ACK-ACK packets get through fine and fast, but the larger request packets after them do not. So that would be another thing you can do: find out if there's a MTU less than 1500 between client and server, because the client network and the server network DO have an MTU of 1500 (deducted from the MSS of 1460 in the SYN-SYN/ACK packets). Maybe there is one connection that has an MTU of 576 (which would be the minimum MTU allowed for IPv4) somewhere in the middle, which would block your 604 byte packets.

answered 27 Oct '12, 02:41

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

thank you Jasper.. So the culprit is 202.162 ? do u have mediafire link to download wireeshark tutorial ?

(31 Oct '12, 09:03) suarez123