This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi all. I'm a web developer who's on a team developing a feature that allows users to upload files up to 10MB to a government website. We're experiencing intermittant problems with this upload feature. The feature works great internally, and in most test environments.

In our UAT environment which mimics prod we're experiencing the following problems:

POSTs seem to freeze to the web server. They sometimes work, but especially for large files being posted fail. We've tried a few different methods (ajax, flash, silverlight) to upload files, but all of them seem to have trouble with large POST bodys.

The difference between our working environments and our non-working environments is that we are behind a load balancer (F5), and possible some other fitering devices. I'm not aware of the details of these devices and they are managed by a separate team for security reasons (government is picky here). This equipment has all worked fine before, but we've never had a need to post 10MB files before either.

When I cap the client side I see a a normal HTTP session, then as soon as the upload fails I see 3 ACKs followed by a Fast Retransmission, then a series of retransmissions then some OOO packets. Would this disrupt a HTTP Post operation?

asked 07 Feb '11, 19:33

Kellen_Sunderland's gravatar image

Kellen_Sunde...
1112
accept rate: 0%

edited 07 Feb '11, 19:35


It looks like your HTTP Post operation gets into trouble at some point. What I would do is try to capture the same upload session on the client and the server at the same time, and then compare where the frames show inconsistencies. I'd probably do this with the exact same file twice, once where it works fine locally and once where it doesn't work remotely.

My guess would be that at some point the server doesn't receive client data anymore even though the client keeps sending, or maybe the server data gets interrupted as well. If you see that this happens you need to identify the device that disrupts the upload, which can be difficult if there are security rules for capturing network data at systems you do not have access to yourself (or even if you have access).

permanent link

answered 08 Feb '11, 03:15

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 08 Feb '11, 03:16

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×104
×36
×31
×15

question asked: 07 Feb '11, 19:33

question was seen: 4,687 times

last updated: 08 Feb '11, 03:16

p​o​w​e​r​e​d by O​S​Q​A