This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I'm facing a strange issue. We have two systems communicating via RFC, but this communication breaks everytime with the following issue:

The Client receives an TCP ACK with an SLE=2734286 and SLR=2777173 Client then starts a retransmission of the "missing" packages Then receives a TCP DUP ACK with SACK: 2777089-2777173 2734286-2777173

This is weird, isnt it? The SACK parameters are overlapping. The Client then sends again the missing packages but always receives the TCP DUP ACK. After 5 tries the client gives up.

Its Windows 2003 to Linux 2.6.32.

Is someone of you aware of such an issue? The Network connection itself is working without issues (for ex. when copying data via SSH, there the SACK protocol seems to work correct).

Thanks and kind regards Stefan

asked 07 Nov '12, 07:13

sLy's gravatar image

sLy
1111
accept rate: 0%

you need to supply the ACK number from the Acknowledgements in order to solve this, please provide ACK and SACK information for those packets plus if possible the tcp.len of the data packets

(07 Nov '12, 07:57) Landi

Better yet, put the offending capture on cloudshark for us all to see.

(08 Nov '12, 07:10) Jaap ♦
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×139
×17
×4

question asked: 07 Nov '12, 07:13

question was seen: 2,429 times

last updated: 08 Nov '12, 07:10

p​o​w​e​r​e​d by O​S​Q​A