This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Website upload feature failing, Retransmissions and Out Of Order packets present

0

Hi all. I'm a web developer who's on a team developing a feature that allows users to upload files up to 10MB to a government website. We're experiencing intermittant problems with this upload feature. The feature works great internally, and in most test environments.

In our UAT environment which mimics prod we're experiencing the following problems:

POSTs seem to freeze to the web server. They sometimes work, but especially for large files being posted fail. We've tried a few different methods (ajax, flash, silverlight) to upload files, but all of them seem to have trouble with large POST bodys.

The difference between our working environments and our non-working environments is that we are behind a load balancer (F5), and possible some other fitering devices. I'm not aware of the details of these devices and they are managed by a separate team for security reasons (government is picky here). This equipment has all worked fine before, but we've never had a need to post 10MB files before either.

When I cap the client side I see a a normal HTTP session, then as soon as the upload fails I see 3 ACKs followed by a Fast Retransmission, then a series of retransmissions then some OOO packets. Would this disrupt a HTTP Post operation?

asked 07 Feb '11, 19:33

Kellen_Sunderland's gravatar image

Kellen_Sunde...
1112
accept rate: 0%

edited 07 Feb '11, 19:35


One Answer:

0

It looks like your HTTP Post operation gets into trouble at some point. What I would do is try to capture the same upload session on the client and the server at the same time, and then compare where the frames show inconsistencies. I'd probably do this with the exact same file twice, once where it works fine locally and once where it doesn't work remotely.

My guess would be that at some point the server doesn't receive client data anymore even though the client keeps sending, or maybe the server data gets interrupted as well. If you see that this happens you need to identify the device that disrupts the upload, which can be difficult if there are security rules for capturing network data at systems you do not have access to yourself (or even if you have access).

answered 08 Feb '11, 03:15

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 08 Feb '11, 03:16