This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

15 second delay in client to server

1

I have two WCF services A and B. Service A calls service B over a TCP binding with security mode set to transport. Here's a part of network capture for one such calls. There's a delay of around 15 seconds between two consecutive TCP Packets. This occurs frequently and I am not sure of the cause here. There can be more than one connection between the two services over different port for different calls at a given point in time. What can be the possible causes here. I will appreciate any help.

asked 26 Jun '13, 21:29

Tenali's gravatar image

Tenali
26114
accept rate: 0%

edited 27 Jun '13, 20:04

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


One Answer:

0

Looks like the trace was taken at the server (assuming port 808 is the server). alt text The excerpt starts with the server sending 1 byte after having received 117 bytes. The client "delayed_acks" this one byte and then the communication stalls.

14.796 secs later the client sends 5 + 40 bytes in two seperate data segments.

   Server                   Client 
10.11.27.247:808        10.2.89.68:57400
       -----------------------> (1 byte)
               ... 200ms + 14ms
       <----------------------- ack

Delay 14.796 secs <———————– 5 bytes <———————– 40 bytes

I would say you need to look/trace at the client side and investigate the delay.

Can you upload the (filtered on “tcp.port==57400 and tcp.port==808”) trace to http://www.cloudshark.org ?

answered 26 Jun ‘13, 22:19

mrEEde2's gravatar image

mrEEde2
3364614
accept rate: 20%

edited 26 Jun ‘13, 22:32

Hhm…, if this is SSL as the ‘security mode set to transport’ might suggest, then the client is sending a Client Hello and the server does not answer with a ‘Server Hello’. Is the server SSL/TLS enabled? Without a complete trace of the session this is all guessing

(26 Jun ‘13, 22:35) mrEEde2

The traces were taken on client A and 808 is Server B. I am not able to upload to cloudshark it seems unavailable. SSL/TLS is enabled on server and in fact after the 15 seconds delay noted earlier the communication works fine. The client sends the request payload and the server returns in a few secs. But the 15 seconds delay happens for every new connection.

(26 Jun ‘13, 22:50) Tenali
1

There might be some sidesteps that are delaying the flows here like DNS requests or CRL lookups that rely on a 15 seconds timeout before processing can continue.

(26 Jun ‘13, 23:02) mrEEde2