This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

2 of my servers are trying to download a virus signature file from McAfee site and it just kept timing out. I plugged my PC directly to the switch and I was able to download the file without any problem.

I am using Wireshark to see what is going on with my servers. I saw [tcp dup ack 674#2] and [tcp zerowindow], and [tcp out-of-order]. I am not familiar with those errors. May be you can tell me the meaning of those errors.

Thanks

asked 15 Jul '13, 10:51

character9's gravatar image

character9
16101012
accept rate: 0%

is it possible to post the capture files somewhere (google docs, dropbox, etc.)?

(16 Jul '13, 02:36) Kurt Knochner ♦

TCP Duplicate acknowledgement is an error recovery behavior w.r.t TCP protocol.TCP Duplicate acknowledgement(from receiver) notifies (to sender) that one or more segments lost during transmission.After this notification sender realizes that there is a loss and tries to retransmit the lost segment.

TCP Zero-window indicates that the receiver buffer filled up and doesn't have any space to process the data from sender.This indicates the sender to stall the data transmission until receiver indicates that it got some free buffer to process.

TCP Out of Order: Check out the link below http://ask.wireshark.org/questions/1698/tcp-out-of-order-what-does-it-means

permanent link

answered 15 Jul '13, 11:00

krishnayeddula's gravatar image

krishnayeddula
629354148
accept rate: 6%

edited 15 Jul '13, 11:01

So is it valid to say that the time out issue is due to the TCP zero-window as the source does not have space to process the downloaded data? Is there any feature or techniques in Wireshark that I can use to pinpoint the issue. Thank you.

(15 Jul '13, 17:42) character9
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×52
×36
×13
×6

question asked: 15 Jul '13, 10:51

question was seen: 2,082 times

last updated: 16 Jul '13, 02:36

p​o​w​e​r​e​d by O​S​Q​A